← All credits
EVIL0RD
21 vulnerability records and advisories credit this contributor.
CVE-2026-105129
LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API
CVE-2026-105131
mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint
CVE-2026-105126
LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering
CVE-2026-105130
LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit
CVE-2026-105125
LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints
CVE-2026-105128
LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
CVE-2026-93922
SiYuan through 3.8.4 Stored XSS via notebook names
CVE-2026-93923
SiYuan through 3.8.4 Stored XSS via Heading Style Attribute
CVE-2026-93921
SiYuan through 3.8.4 Access Control Bypass via Dynamic Icon Endpoint