← All credits
Eldor Nabijonov
8 vulnerability records and advisories credit this contributor.
CVE-2026-105835
PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint
CVE-2026-106056
Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting
CVE-2026-105834
Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source
CVE-2026-73529
Plainpad Missing Rate Limiting via POST /v1/sessions
CVE-2026-71204
changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement
CVE-2026-71203
changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema
CVE-2026-71206
shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion
CVE-2026-71205
changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force