← All credits
cyberkareem
17 vulnerability records and advisories credit this contributor.
CVE-2026-114079
Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint
CVE-2026-114076
Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL
CVE-2026-114078
Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup
CVE-2026-85615
Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayouts
CVE-2026-85614
OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker
CVE-2026-85613
OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy
CVE-2026-62236
grav-plugin-login < 3.8.11 CSRF via regenerate2FASecret
CVE-2026-62235
Grav Flex-Objects < 1.4.3 Authorization Bypass via API
CVE-2026-62233
grav-plugin-api < 1.0.6 Privilege Escalation via createApiKey
CVE-2026-61448
Parse Server 9.0.0 Stored XSS via malformed Content-Type