← All credits

Sohaib Harraoui (Ostorlab)

5 vulnerability records and advisories credit this contributor.

CVE-2026-107269

Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy

CVE-2026-107271

Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For Spoofing

CVE-2026-107273

Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site

CVE-2026-107272

Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages

CVE-2026-107270

Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints