← All credits

truff, https://yeswehack.com/hunters/truff

38 vulnerability records and advisories credit this contributor.

CVE-2026-102092

Kiteworks Core stored XSS

CVE-2026-102093

Kiteworks Core improper privilege management

CVE-2026-102143

Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

CVE-2026-102142

Kiteworks Core Remote Code Execution through Server-Side Template Injection

CVE-2026-102089

Kiteworks Email Protection Gateway path traversal

CVE-2026-102098

Kiteworks Core SQL Injection

CVE-2026-102091

Kiteworks Secure Data Forms server-side request forgery

CVE-2026-102095

Kiteworks Email Protection Gateway server-side request forgery

CVE-2026-102099

Kiteworks Core arbitrary file write

CVE-2026-102097

Kiteworks Email Protection Gateway remote code execution