← All credits

manus-use

207 vulnerability records and advisories credit this contributor.

CVE-2026-121429

AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()

CVE-2026-116204

YesWiki before 4.7.0 CSRF via despam Admin Action

CVE-2026-121437

Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters

CVE-2026-116823

YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST Fallback

CVE-2026-116827

YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV Import

CVE-2026-116208

YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts

CVE-2026-119120

Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

CVE-2026-116889

SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property

CVE-2026-116885

Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter

CVE-2026-116825

YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox