CVEs

A list of CVEs I’ve discovered and responsibly disclosed. Click any card for the public advisory.

2025 CVE

Authenticated SQL Injection

SuiteCRM • CVE-2025-64488

GitHub Advisory

2025 CVE

Authentication Bypass

PMTicket • CVE-2025-11135

MITRE / CVE.org

2025 CVE

SQL Injection

PMTicket • CVE-2025-7886

MITRE / CVE.org

2024 CVE

SQL Injection

Tecno 4G Portable WiFi Router • CVE-2024-10195

MITRE / CVE.org

2023 CVE

Authenticated Remote Code Execution

Tecno 4G Portable WiFi Router • CVE-2023-6304

MITRE / CVE.org