← All credits
n0mi1k
72 vulnerability records and advisories credit this contributor.
CVE-2026-123766
Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI page
CVE-2026-123779
Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routes
CVE-2026-123753
Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpoints
CVE-2026-123770
Apache Axis2/Java: Unbounded multipart and form-encoded request bodies
CVE-2026-76171
Apache James: SSRF filter bypass in the JMAP PushSubscription web-push client
CVE-2026-81815
Apache OFBiz: SQL injection - performFind ignore-case values, MySQL/MariaDB
CVE-2026-81808
Apache OFBiz: Missing authorization - search-result bulk catalog mutation
CVE-2026-81828
Apache OFBiz: Server-side request forgery in SurveyWrapper
CVE-2026-81744
Apache OFBiz: Authorization bypass - self-grant content OWNER
CVE-2026-81734
Apache OFBiz: Missing authorization - catalog quick-admin product writes