← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-72846
Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery
CVE-2026-72843
EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
CVE-2026-72818
NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input
CVE-2026-72776
AgenticSeek Unauthenticated RCE via /query API Endpoint
CVE-2026-70561
TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
CVE-2026-65319
Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text
CVE-2026-65318
Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader
CVE-2026-65317
Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass
CVE-2026-65316
xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat
CVE-2026-65315
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser