← All credits
WhiteSource Vulnerability Research Team (WVR)
42 vulnerability records and advisories credit this contributor.
CVE-2021-25939
ArangoDB - Blind SSRF when Downloading Foxx Service from URL
CVE-2022-23067
ToolJet - Token Leakage via Referer Header
CVE-2022-23060
Shopizer - Stored XSS in Manage Files
CVE-2022-23065
Vendure - XSS via SVG File Upload
CVE-2021-25992
ifme - Insufficient Session Expiration
CVE-2021-25994
Userfrosting - Host-Header Injection Leads to Account Takeover
CVE-2021-25981
Talkyard - Insufficient Session Expiration
CVE-2022-22111
DayByDay CRM - Missing Authorization when Changing Password
CVE-2022-22110
DayByDay CRM - Weak Password Requirements in Update User
CVE-2022-22108
DayByDay CRM - Missing Authorization when Viewing Absences