← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-61518
ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
CVE-2026-66399
phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership
CVE-2026-73482
phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php
CVE-2026-72741
Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
CVE-2026-67179
Genkit improper host header validation
CVE-2026-67180
Google Turbinia arbitrary command execution
CVE-2026-69113
Cap v0.3.1 Broken Access Control via video comment endpoint
CVE-2026-73481
phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
CVE-2026-73038
NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name
CVE-2026-73034
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header