← All credits

HaiND from the Post and Telecommunication Institute of Technology

78 vulnerability records and advisories credit this contributor.

CVE-2026-108719

LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

CVE-2026-108718

Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration

CVE-2026-108717

Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetController

CVE-2026-108716

mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmission via --device-code OAuth Grant

CVE-2026-108715

LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

CVE-2026-108714

MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

CVE-2026-108713

SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via setCampaignMarketingAndTemplate

CVE-2026-108712

SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via DetailUserRole Entry Point

CVE-2026-108711

Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/workspaces

CVE-2026-108710

NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints