← All credits
lichoin
8 vulnerability records and advisories credit this contributor.
CVE-2026-111628
10up Distributor before 2.3.2 PHP Object Injection via set_meta()
CVE-2026-111624
Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs
CVE-2026-111625
10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action
CVE-2026-111631
Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions
CVE-2026-111627
HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation
CVE-2026-100697
Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver
CVE-2026-100696
Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver
CVE-2026-87976
Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles