← All credits

Xanlar Agamalizade

5 vulnerability records and advisories credit this contributor.

Vayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation

OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)

OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes

WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation

OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes