CVEs

A list of CVEs I’ve discovered and responsibly disclosed. Click any card for the public advisory.

2026 CVE

PmTicket Unauthenticated SQL Injection via setSync

PMTicket • CVE-2026-96751

MITRE / CVE.org

2025 CVE

Authenticated SQL Injection

SuiteCRM • CVE-2025-64488

GitHub Advisory

2025 CVE

Authentication Bypass via Insecure Deserialization

PMTicket • CVE-2025-11135

MITRE / CVE.org

2025 CVE

SQL Injection

PMTicket • CVE-2025-7886

MITRE / CVE.org

2026 CVE

Path Traversal Leading to Code Execution

FLB Music Player • CVE-2026-101036

MITRE / CVE.org

2024 CVE

SQL Injection

Tecno 4G Portable WiFi Router • CVE-2024-10195

MITRE / CVE.org

2023 CVE

Authenticated Remote Code Execution

Tecno 4G Portable WiFi Router • CVE-2023-6304

MITRE / CVE.org