Skip to content
Noroxi

[yvvdwf](https://hackerone.com/yvvdwf)

56 credited records · 13 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for [yvvdwf](https://hackerone.com/yvvdwf)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-79708
    34Monitor

    Incorrect Authorization in GitLab

    HighCVSS 8.5No exploitEPSS 0%

    gitlab · gitlabSep 16, 2026

  • CVE-2026-15217
    34Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    HighCVSS 8.7No exploitEPSS 0%

    gitlab · gitlabAug 12, 2026

  • CVE-2026-15216
    34Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    HighCVSS 8.7No exploitEPSS 0%

    gitlab · gitlabAug 12, 2026

  • CVE-2026-6896
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabJul 8, 2026

  • CVE-2026-10086
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabJun 25, 2026

  • CVE-2026-10087
    34Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    HighCVSS 8.7No exploitEPSS 0%

    gitlab · gitlabJun 11, 2026

  • CVE-2026-7481
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabMay 14, 2026

  • CVE-2026-5377
    17Monitor

    Incorrect Authorization in GitLab

    MediumCVSS 4.3No exploitEPSS 0%

    gitlab · gitlabApr 22, 2026

  • CVE-2026-1182
    17Monitor

    Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

    MediumCVSS 4.3No exploitEPSS 0%

    gitlab · gitlabMar 11, 2026

  • CVE-2026-1090
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabMar 11, 2026

  • CVE-2025-9222
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabJan 9, 2026

  • CVE-2025-8405
    30Monitor

    Improper Encoding or Escaping of Output in GitLab

    HighCVSS 7.7No exploitEPSS 0%

    gitlab · gitlabDec 11, 2025

  • CVE-2025-12716
    34Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    HighCVSS 8.7No exploitEPSS 0%

    gitlab · gitlabDec 11, 2025

  • CVE-2025-7739
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabAug 13, 2025

  • CVE-2025-6948
    32Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    HighCVSS 8.0No exploitEPSS 0%

    gitlab · gitlabJul 10, 2025

  • CVE-2023-5600
    12Monitor

    Missing Authorization in GitLab

    LowCVSS 3.1No exploitEPSS 0%

    gitlab · gitlabJun 20, 2025

  • CVE-2025-2254
    24Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 6.1No exploitEPSS 0%

    gitlab · gitlabJun 12, 2025

  • CVE-2025-2255
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabMar 27, 2025

  • CVE-2025-0811
    21Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 5.4No exploitEPSS 0%

    gitlab · gitlabMar 27, 2025

  • CVE-2025-0376
    24Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 6.1No exploitEPSS 0%

    gitlab · gitlabFeb 12, 2025

  • CVE-2024-6356
    17Monitor

    Incorrect User Management in GitLab

    MediumCVSS 4.4No exploitEPSS 0%

    gitlab · gitlabFeb 5, 2025

  • CVE-2025-0314
    24Monitor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    MediumCVSS 6.1No exploitEPSS 0%

    gitlab · gitlabJan 23, 2025

  • CVE-2024-12570
    26Monitor

    Privilege Context Switching Error in GitLab

    MediumCVSS 6.7No exploitEPSS 0%

    gitlab · gitlabDec 12, 2024

  • CVE-2024-8970
    35Monitor

    Incorrect Authorization in GitLab

    HighCVSS 8.8No exploitEPSS 0%

    gitlab · gitlabOct 11, 2024

  • CVE-2024-8641
    35Monitor

    Privilege Context Switching Error in GitLab

    HighCVSS 8.8No exploitEPSS 0%

    gitlab · gitlabSep 12, 2024