← All credits

hieuPenguinnn

21 vulnerability records and advisories credit this contributor.

CVE-2026-108865

AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize

CVE-2026-108860

BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

CVE-2026-108855

UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publish

CVE-2026-108850

Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup

CVE-2026-108863

Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface

CVE-2026-108858

Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

CVE-2026-108853

UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app

CVE-2026-108699

hyper-mcp through 0.8.3 Improper Signature Verification of OCI WebAssembly Plugins

CVE-2026-108862

APIPark through 1.9.7-beta IDOR via application authorization endpoints

CVE-2026-108857

Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging