← All credits

hieuPenguinnn

89 vulnerability records and advisories credit this contributor.

CVE-2026-110220

Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

CVE-2026-110216

youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint

CVE-2026-110215

youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation

CVE-2026-110211

SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint

CVE-2026-110210

Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query

CVE-2026-110225

Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

CVE-2026-109392

Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview

CVE-2026-110126

waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints

CVE-2026-110121

PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint

CVE-2026-110116

Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile