GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Seong Hun Jeong (HunSec)

2 vulnerability records and advisories credit this contributor.

CVE-2026-15141
Referer Validation Bypass in TL-WR820N Web Management Interface
CVE-2026-29199
phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link