← All credits

Mansurzhan Mavlankulov

9 vulnerability records and advisories credit this contributor.

CVE-2026-110690

Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack

CVE-2026-109564

LearnHouse before 1.4.0 Missing Authorization via Playground Duplicate Endpoint

CVE-2026-109426

Telegram-Stremio 5.1.0 Insecure Session Storage via encode_string

CVE-2026-104059

Lektor 3.3.14 CSRF via Admin API Endpoints

CVE-2026-104058

Podgrab Missing Authentication on WebSocket /ws Endpoint

CVE-2026-104057

Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler

CVE-2026-109427

Telegram-Stremio 5.1.0 Broken Object Authorization via Stream IDs

CVE-2026-103397

OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender

CVE-2026-103398

OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path