← All credits
skeletonsec
26 vulnerability records and advisories credit this contributor.
CVE-2026-105833
EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords
CVE-2026-86197
Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox
CVE-2026-104441
YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action
CVE-2026-104442
YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action
CVE-2026-104438
YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions
CVE-2026-104440
YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter
CVE-2026-104439
YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
CVE-2026-82238
filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads
CVE-2026-82236
File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion
CVE-2026-100711
froxlor before 2.3.12 Authentication Bypass via Session Persistence