← All credits
XBOW
3 vulnerability records and advisories credit this contributor.
CVE-2025-8264
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows th
CVE-2025-0133
PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal
CVE-2025-27888
Apache Druid: Server-Side Request Forgery and Cross-Site Scripting