← All credits

HaiND from the Post and Telecommunication Institute of Technology

78 vulnerability records and advisories credit this contributor.

CVE-2026-108739

OpenAgents Workspace through launcher-v1.0.17 Unauthenticated Credential Exposure via /v1/workspaces

CVE-2026-108738

Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callback

CVE-2026-108737

Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion

CVE-2026-108736

Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoofing

CVE-2026-108735

Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL

CVE-2026-108734

Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document

CVE-2026-108733

Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocation

CVE-2026-108732

Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount

CVE-2026-108731

Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass

CVE-2026-108730

Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIs