adrgs
13 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2026-90936No exploit | Froxlor before 2.3.7 Information Disclosure via customer_email.phpfroxlor · froxlor · CWE-200 | Medium5.3 | — | 0.3% | Sep 14, 2026 |
36Monitor | CVE-2026-79664No exploit | Ech0 before 4.7.3 Access Token Revocation Bypasslin-snow · ech0 · CWE-613 | Critical9.1 | — | 0.3% | Aug 25, 2026 |
19Monitor | CVE-2026-79663No exploit | Ech0 before 4.7.3 Stored XSS via RSS feed tag nameslin-snow · ech0 · CWE-79 | Medium4.8 | — | 0.2% | Aug 25, 2026 |
35Monitor | CVE-2026-79662No exploit | Ech0 before 4.7.3 OAuth Redirect URI Validation Bypasslin-snow · ech0 · CWE-601 | High8.8 | — | 0.3% | Aug 25, 2026 |
27Monitor | CVE-2026-79661No exploit | Ech0 before 4.7.3 Unauthenticated fav_count Modificationlin-snow · ech0 · CWE-770 | Medium6.9 | — | 0.4% | Aug 25, 2026 |
27Monitor | CVE-2026-79660No exploit | Ech0 before 4.7.3 Email Disclosure via Public APIlin-snow · ech0 · CWE-200 | Medium6.9 | — | 0.4% | Aug 25, 2026 |
28Monitor | CVE-2026-73617No exploit | Budibase before 3.40.0 NoSQL Injection via MongoDB datasourcebudibase · server · CWE-943 | High7.1 | — | 0.3% | Aug 13, 2026 |
21Monitor | CVE-2026-56347No exploit | AVideo TopMenu Plugin - Stored Cross-Site Scripting via Unescaped Menu Item Fieldswwbn · avideo · CWE-79 | Medium5.3 | — | 0.2% | Jun 20, 2026 |
34Monitor | CVE-2026-46366No exploit | phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypassthorsten · phpmyfaq · CWE-863 | High8.7 | — | 0.3% | May 15, 2026 |
38Monitor | CVE-2026-46364Proof of concept | phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptchathorsten · phpmyfaq · CWE-89 | Critical9.3 | — | 1.7% | May 15, 2026 |
30Monitor | CVE-2026-46359No exploit | phpMyFAQ - SQL Injection in CurrentUser::setTokenData via Unescaped OAuth Token Fieldsthorsten · phpmyfaq · CWE-89 | High7.7 | — | 0.2% | May 15, 2026 |
37Monitor | CVE-2026-45010No exploit | phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpointthorsten · phpmyfaq · CWE-307 | Critical9.3 | — | 0.4% | May 15, 2026 |
28Monitor | CVE-2026-45008No exploit | phpMyFAQ - Path Traversal in Client::deleteClientFolder via URL Parameterthorsten · phpmyfaq · CWE-73 | High7.0 | — | 0.2% | May 15, 2026 |
- CVE-2026-9093621Monitor
Froxlor before 2.3.7 Information Disclosure via customer_email.php
MediumCVSS 5.3No exploitEPSS 0%froxlor · froxlorSep 14, 2026
- CVE-2026-7966436Monitor
Ech0 before 4.7.3 Access Token Revocation Bypass
CriticalCVSS 9.1No exploitEPSS 0%lin-snow · ech0Aug 25, 2026
- CVE-2026-7966319Monitor
Ech0 before 4.7.3 Stored XSS via RSS feed tag names
MediumCVSS 4.8No exploitEPSS 0%lin-snow · ech0Aug 25, 2026
- CVE-2026-7966235Monitor
Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass
HighCVSS 8.8No exploitEPSS 0%lin-snow · ech0Aug 25, 2026
- CVE-2026-7966127Monitor
Ech0 before 4.7.3 Unauthenticated fav_count Modification
MediumCVSS 6.9No exploitEPSS 0%lin-snow · ech0Aug 25, 2026
- CVE-2026-7966027Monitor
Ech0 before 4.7.3 Email Disclosure via Public API
MediumCVSS 6.9No exploitEPSS 0%lin-snow · ech0Aug 25, 2026
- CVE-2026-7361728Monitor
Budibase before 3.40.0 NoSQL Injection via MongoDB datasource
HighCVSS 7.1No exploitEPSS 0%budibase · serverAug 13, 2026
- CVE-2026-5634721Monitor
AVideo TopMenu Plugin - Stored Cross-Site Scripting via Unescaped Menu Item Fields
MediumCVSS 5.3No exploitEPSS 0%wwbn · avideoJun 20, 2026
- CVE-2026-4636634Monitor
phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypass
HighCVSS 8.7No exploitEPSS 0%thorsten · phpmyfaqMay 15, 2026
- CVE-2026-4636438Monitor
phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha
CriticalCVSS 9.3Proof of conceptEPSS 1%thorsten · phpmyfaqMay 15, 2026
- CVE-2026-4635930Monitor
phpMyFAQ - SQL Injection in CurrentUser::setTokenData via Unescaped OAuth Token Fields
HighCVSS 7.7No exploitEPSS 0%thorsten · phpmyfaqMay 15, 2026
- CVE-2026-4501037Monitor
phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint
CriticalCVSS 9.3No exploitEPSS 0%thorsten · phpmyfaqMay 15, 2026
- CVE-2026-4500828Monitor
phpMyFAQ - Path Traversal in Client::deleteClientFolder via URL Parameter
HighCVSS 7.0No exploitEPSS 0%thorsten · phpmyfaqMay 15, 2026