← All credits
tonghuaroot
34 vulnerability records and advisories credit this contributor.
CVE-2026-124452
OpenEMR before 8.3.0 Stored XSS via Eye Exam Document Notes
CVE-2026-63769
Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method
CVE-2026-121420
SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses
CVE-2026-59562
Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC
CVE-2026-116179
vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
CVE-2026-110712
libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info
CVE-2026-108109
PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code
CVE-2026-66082
Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）
CVE-2026-79658
Ech0 before 5.0.1 Denial of Service via Accept-Language
CVE-2026-60092
AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel