← All credits
cyberkareem
17 vulnerability records and advisories credit this contributor.
CVE-2026-114077
Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4
CVE-2026-108073
SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
CVE-2026-97219
MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter
CVE-2026-101057
utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL
CVE-2026-84906
Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay
CVE-2026-82186
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
CVE-2026-82182
WPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner Isolation