← All credits
KhanMarshai
4 vulnerability records and advisories credit this contributor.
CVE-2026-58141
Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints
CVE-2026-49142
OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
CVE-2026-25552
Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header
CVE-2026-18111
Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification