← All credits
Victor Pasman
10 vulnerability records and advisories credit this contributor.
CVE-2026-3773
Accessibility Suite by Ability, Inc <= 4.20 - Authenticated (Subscriber+) SQL Injection via 'scan_id' Parameter
CVE-2025-36752
Undocumented backup Account and No Password Configuration Capability
CVE-2025-36747
Hardcoded FTP Credentials within the firmware
CVE-2025-36754
Authentication bypass on web interface
CVE-2025-36748
Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X
CVE-2025-36750
Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X
CVE-2025-36753
SWD Interface Open on Growatt ShineLan-X
CVE-2025-36751
Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X
CVE-2022-2094
Yellow Yard Searchbar < 2.8.2 - Reflected Cross-Site Scripting
CVE-2022-1093
WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs