← All credits

khanmarshai

2 vulnerability records and advisories credit this contributor.

CVE-2026-18111
Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification
CVE-2026-25552
Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header