← All credits
arpitjain099
39 vulnerability records and advisories credit this contributor.
CVE-2026-105828
Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors
CVE-2026-91991
Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs
CVE-2026-75828
Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass
CVE-2026-75827
Grav before 2.0.15 Arbitrary File Write via error_log
CVE-2026-105119
OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows
CVE-2026-104445
YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing
CVE-2026-105122
OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri
CVE-2026-105121
OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping
CVE-2026-102297
ZoneMinder before 1.38.4 Incorrect Authorization in frames API index
CVE-2026-104452
YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler