← All credits

George Chen

510 vulnerability records and advisories credit this contributor.

Plane through 1.4.2 Arbitrary Comment Write via Public Deploy Board

MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler

AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server

SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpoints

Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server

Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control

APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guard

Webstudio through 0.296.0 SSRF via /cgi proxy routes

gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint

Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching