← All credits
offset
51 vulnerability records and advisories credit this contributor.
CVE-2026-56336
Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint
CVE-2026-56281
Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint
CVE-2026-56223
Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user
CVE-2026-92960
vm2 before 3.11.6 Process-wide State Exposure via os and dns
CVE-2026-90535
Flowise before 3.1.4 Denial of Service via text-to-speech/abort
CVE-2026-82866
@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
CVE-2026-82865
pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label
CVE-2026-82864
pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb
CVE-2026-69094
Admidio before 5.0.11 IDOR via save_temporary mylist_function.php
CVE-2026-86251
h3 before 1.15.9 Path Traversal via Double Decoding