← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-59805
Gumroad < 2026.07.06.2 - Insecure Direct Object Reference in PurchasesController
CVE-2026-59803
rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol
CVE-2026-59807
Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts
CVE-2026-59804
Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket
CVE-2026-59102
Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rendering
CVE-2026-59509
Unauthenticated arbitrary MongoDB collection read in cve-search
CVE-2026-56780
Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change API
CVE-2026-57954
Elide 7.1.17 - Permission Bypass in Sort Expression Validation
CVE-2026-57942
LibreTranslate - IP Spoofing via X-Forwarded-For Header
CVE-2026-57958
Mixpost 2.6.0 - Reflected XSS via OAuth Callback Error Parameter