← All credits
leediay153 from Viettel Post
37 vulnerability records and advisories credit this contributor.
CVE-2026-108100
HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter
CVE-2025-71421
UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent
CVE-2025-71420
UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply
CVE-2025-71419
UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer
CVE-2026-108108
PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
CVE-2026-108164
Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route
CVE-2026-108101
HortusFox through 6.3 Unrestricted File Upload via Plant Attachments
CVE-2026-97062
Aureus ERP 1.6.0 Stored XSS via SVG File Upload
CVE-2026-108109
PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code
CVE-2026-108107
PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php