← All credits
sondt99
20 vulnerability records and advisories credit this contributor.
CVE-2026-104472
YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler
CVE-2026-104470
YesWiki before 4.6.7 SSRF and XSS via Bazar valeur Action
CVE-2026-104467
YesWiki before 4.6.7 Authorization Bypass via Public API Mode
CVE-2026-104466
YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute
CVE-2026-104413
Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images
CVE-2026-100631
Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
CVE-2026-101085
Nezha before 2.3.8 Denial of Service via Alert Rule
CVE-2026-92959
vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
CVE-2026-91773
Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Locks
CVE-2026-82661
Nodemailer CRLF Injection via List-* Header Comments