← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-58165
OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation
CVE-2026-58000
luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey
CVE-2026-57960
Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_id
CVE-2026-57959
Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race Condition
CVE-2026-57957
Papermark 0.22.0 - CORS Misconfiguration in Viewer Upload Endpoint
CVE-2026-57955
SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter
CVE-2026-57953
Mythic < 3.4.0.60 - Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook Endpoint
CVE-2026-57952
Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID
CVE-2026-57951
Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table
CVE-2026-57950
ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController