← All credits
khoadb175
4 vulnerability records and advisories credit this contributor.
CVE-2026-86767
Snipe-IT before 8.7.0 Cross-Company Read via requested-assets
CVE-2026-85616
Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
CVE-2026-55987
OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
CVE-2026-23603
Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim