← All credits
Bobur Abdugafforov
40 vulnerability records and advisories credit this contributor.
CVE-2026-71247
Documenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documents
CVE-2026-71246
Pixelfed - Authenticated SSRF via Remote URL Search
CVE-2026-71244
Paperless-ngx - Mail Account Test Connection Leaks Stored IMAP/OAuth Credentials to Attacker-Controlled Host
CVE-2026-71242
Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy
CVE-2026-71236
Grocy - Stored XSS via HTMLPurifier Output Double-Decode
CVE-2026-55743
OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
CVE-2026-55739
Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion
CVE-2026-54418
Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Account 2FA Secret Disclosure and Bypass
CVE-2026-54415
Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover
CVE-2026-65694
Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController