← All credits
alham-rizvi
51 vulnerability records and advisories credit this contributor.
CVE-2026-76846
Grav before 2.0.16 Information Disclosure via Twig Sandbox
CVE-2026-72701
Grav CMS before 2.0.16 Timing Attack via verifyNonce
CVE-2026-72696
Grav CMS before 2.0.16 Symlink Following via createLockFile
CVE-2026-56707
Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode
CVE-2026-62204
SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install
CVE-2026-59809
SiYuan before v3.8.0 Secret Exfiltration via http_request URL
CVE-2026-56709
Grav before 3.9.2 Host Header Injection via sendInvitationEmail
CVE-2026-72698
Grav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass
CVE-2026-80204
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CVE-2026-56708
Grav API Plugin before 1.0.16 SSRF via DNS Rebinding