← All credits

HaiND from the Post and Telecommunication Institute of Technology

78 vulnerability records and advisories credit this contributor.

CVE-2026-108592

mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

CVE-2026-108591

InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool

CVE-2026-108586

1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter

CVE-2026-108585

argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool

CVE-2026-108582

GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

CVE-2026-108581

Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers

CVE-2026-108580

AniWorld Downloader before 5.3.0 WebUI Login Brute Force via /login

CVE-2026-108579

OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export

CVE-2026-108546

Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration