← All credits

HaiND from the Post and Telecommunication Institute of Technology

78 vulnerability records and advisories credit this contributor.

CVE-2026-108750

OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extraction

CVE-2026-108749

docling-serve 1.14.0 through 1.36.0 Missing Authentication via Memory Management Endpoints

CVE-2026-108748

Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocket

CVE-2026-108747

Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

CVE-2026-108746

Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResources

CVE-2026-108745

CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet

CVE-2026-108744

pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync

CVE-2026-108742

CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation

CVE-2026-108741

Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

CVE-2026-108740

GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment