← All credits

George Chen

621 vulnerability records and advisories credit this contributor.

CVE-2026-126808

WP ERP through 1.17.11 Incorrect Authorization via HRM Job-Info AJAX Handlers

CVE-2026-124029

Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names

CVE-2026-121454

Padloc before 4.3.1 Missing SCIM Token Validation via SCIM GET Requests

CVE-2026-126498

WriteFreely before 0.17.3 Stored XSS via Unsanitized Post Slug

CVE-2026-125367

Pico through 4.1.2 SSRF in Feeds Service via run SSH Command

CVE-2026-125363

MikroDash before 0.8.79 SSRF via Personal Notification Channels

CVE-2026-125359

Mediary Scout before 2026.11.05 SSRF via PanSou Search Source Setting

CVE-2026-124552

Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi

CVE-2026-125368

OmniAgent Bash Approval Gate Bypass via find -execdir in Safe-Command Allowlist

CVE-2026-125364

frab through 0.9.1 Privilege Escalation via conference_users_attributes in UsersController