alienkeric
8 credited records · 8 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2026-116170No exploit | SiYuan before v3.8.7 SQL Injection via History Search op and querysiyuan-note · siyuan · CWE-89 | Medium6.9 | — | 0.3% | Oct 25, 2026 |
34Monitor | CVE-2026-87807No exploit | siyuan before v3.8.2 SQL Injection via fullTextSearchBlocksiyuan-note · siyuan · CWE-89 | High8.7 | — | 0.4% | Sep 9, 2026 |
28Monitor | CVE-2026-61873No exploit | Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filenamegetgrav · grav · CWE-73 | High7.2 | — | 0.3% | Jul 15, 2026 |
21Monitor | CVE-2026-61457No exploit | Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypassgetgrav · grav · CWE-434 | Medium5.3 | — | 0.6% | Jul 15, 2026 |
20Monitor | CVE-2026-61453No exploit | Grav before 2.0.1 XSS via Twig String Concatenationgetgrav · grav · CWE-79 | Medium5.1 | — | 0.1% | Jul 15, 2026 |
27Monitor | CVE-2026-61452No exploit | Grav before 2.0.4 Improper Session Invalidation JWT Access Tokensgetgrav · grav · CWE-613 | Medium6.9 | — | 0.2% | Jul 15, 2026 |
20Monitor | CVE-2026-61456No exploit | Grav before 1.0.3 Stored XSS via SVG Upload APIgetgrav · grav · CWE-79 | Medium5.1 | — | 0.1% | Jul 10, 2026 |
28Monitor | CVE-2026-61455No exploit | Grav before 2.0.1 Decompression Bomb via ZipArchivergetgrav · grav · CWE-409 | High7.1 | — | 0.3% | Jul 10, 2026 |
- CVE-2026-11617027Monitor
SiYuan before v3.8.7 SQL Injection via History Search op and query
MediumCVSS 6.9No exploitEPSS 0%siyuan-note · siyuanOct 25, 2026
- CVE-2026-8780734Monitor
siyuan before v3.8.2 SQL Injection via fullTextSearchBlock
HighCVSS 8.7No exploitEPSS 0%siyuan-note · siyuanSep 9, 2026
- CVE-2026-6187328Monitor
Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename
HighCVSS 7.2No exploitEPSS 0%getgrav · gravJul 15, 2026
- CVE-2026-6145721Monitor
Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass
MediumCVSS 5.3No exploitEPSS 0%getgrav · gravJul 15, 2026
- CVE-2026-6145320Monitor
Grav before 2.0.1 XSS via Twig String Concatenation
MediumCVSS 5.1No exploitEPSS 0%getgrav · gravJul 15, 2026
- CVE-2026-6145227Monitor
Grav before 2.0.4 Improper Session Invalidation JWT Access Tokens
MediumCVSS 6.9No exploitEPSS 0%getgrav · gravJul 15, 2026
- CVE-2026-6145620Monitor
Grav before 1.0.3 Stored XSS via SVG Upload API
MediumCVSS 5.1No exploitEPSS 0%getgrav · gravJul 10, 2026
- CVE-2026-6145528Monitor
Grav before 2.0.1 Decompression Bomb via ZipArchiver
HighCVSS 7.1No exploitEPSS 0%getgrav · gravJul 10, 2026