← All credits
alham-rizvi
51 vulnerability records and advisories credit this contributor.
CVE-2026-72700
Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison
CVE-2026-76839
Grav before 2.0.16 Information Disclosure via offsetGet
CVE-2026-56710
Grav Login Plugin before 1.0.16 Privilege Escalation via Unlock
CVE-2026-60084
SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate
CVE-2026-60083
SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool
CVE-2026-75916
SiYuan XSS-to-RCE via unescaped block metadata in hint popup
CVE-2026-77086
SiYuan before v3.7.4 Path Traversal via packageName
CVE-2026-75917
SiYuan before v3.7.4 XSS-to-RCE via pathName.ts
CVE-2026-74904
SiYuan before v3.7.4 Missing Authorization via block API
CVE-2026-74867
SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth