GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

dangnosuy

5 vulnerability records and advisories credit this contributor.

CVE-2026-5336
Dataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information Disclosure
CVE-2026-10599
Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID Reuse
CVE-2026-13700
WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure
CVE-2026-11570
User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name
CVE-2026-4079
SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection