← All credits

truff, https://yeswehack.com/hunters/truff

38 vulnerability records and advisories credit this contributor.

CVE-2026-102147

Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)

CVE-2026-102145

Kiteworks Core Server-Side Request Forgery through CRLF Injection

CVE-2026-102143

Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

CVE-2026-102142

Kiteworks Core Remote Code Execution through Server-Side Template Injection

CVE-2026-102141

Kiteworks Core Privilege Escalation through External Control of File Name or Path

CVE-2026-102140

Kiteworks Core Insufficient Verification of Data Authenticity

CVE-2026-102138

Kiteworks Core Server-Side Request Forgery (SSRF)

CVE-2026-102136

Kiteworks Core Command Execution through Configuration Injection

CVE-2026-102135

Kiteworks Email Protection Gateway Deserialization of Untrusted Data

CVE-2026-102133

Kiteworks Core Arbitrary File Write through Command Injection