← All credits

HaiND from the Post and Telecommunication Institute of Technology

78 vulnerability records and advisories credit this contributor.

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

CVE-2026-108115

Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses

CVE-2026-108114

Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions

CVE-2026-108165

Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata

CVE-2026-108111

ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search

CVE-2026-108158

plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

CVE-2026-108110

MOVO through 0.2.3 Authorization Bypass via Document Endpoints

CVE-2026-108112

ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint