← All credits

hieuPenguinnn

72 vulnerability records and advisories credit this contributor.

CVE-2026-110215

youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation

CVE-2026-110213

ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item Endpoints

CVE-2026-110212

ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter

CVE-2026-110211

SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint

CVE-2026-110210

Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query

CVE-2026-110208

Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys

CVE-2026-110207

Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs

CVE-2026-110225

Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

CVE-2026-109392

Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview

CVE-2026-110126

waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints