← All credits
leediay153
32 vulnerability records and advisories credit this contributor.
CVE-2026-105029
UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint
CVE-2026-97062
Aureus ERP 1.6.0 Stored XSS via SVG File Upload
CVE-2026-103766
ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
CVE-2026-102569
ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter
CVE-2026-103589
QloApps through 1.7.0 Reflected XSS via Room Type Editor
CVE-2026-103587
QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters
CVE-2026-103590
QloApps through 1.7.0 Reflected XSS via Length of Stay Fields
CVE-2026-103588
QloApps through 1.7.0 Reflected XSS via exceptions field
CVE-2026-100870
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header
CVE-2026-100871
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication