← All credits
riodrwn
13 vulnerability records and advisories credit this contributor.
CVE-2026-18121
Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) in the Calendar block's frontend event dialog (/ccm/calendar/view_event/{bID}/{occurrence_id}).
CVE-2026-56702
Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload
CVE-2026-73629
Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses