← All credits

HAK-MZ team

4 vulnerability records and advisories credit this contributor.

Stored Cross-Site Scripting (XSS) in Note Station file upload functionality

Privilege Escalation via QuFTP Log-based XSS

Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint