← All credits

manus-use

85 vulnerability records and advisories credit this contributor.

CVE-2026-104464

YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

CVE-2026-104462

YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter

CVE-2026-104456

YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username

CVE-2026-104454

YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint

CVE-2026-104452

YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler

CVE-2026-104450

YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

CVE-2026-104448

YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler

CVE-2026-104446

YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler

CVE-2026-104463

YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox

CVE-2026-104459

YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle