← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-58467
Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php
CVE-2026-58466
AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()
CVE-2026-58450
Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter
CVE-2026-58449
txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter
CVE-2026-58448
yudao-cloud < 2026.06 - BPM Module Broken Access Control via process-instance API
CVE-2026-58447
Invidious - Cross-User Playlist Video Deletion via Missing Ownership Check
CVE-2026-58446
Presenton < 0.8.8-beta - Authentication Bypass of Session Auth via Unprotected MCP Endpoint
CVE-2026-58377
JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys
CVE-2026-58376
Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints
CVE-2026-58375
JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export