HDWSec
3 credited records · 3 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2026-112064No exploit | SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)typo3 · extension "sgalinski cookie consent" · CWE-89 | High7.1 | — | 0.3% | Oct 20, 2026 |
21Monitor | CVE-2026-77132No exploit | TYPO3 CMS - Information Disclosure via Backend Localization Wizardtypo3 · typo3 cms · CWE-200 | Medium5.3 | — | 0.4% | Sep 8, 2026 |
20Monitor | CVE-2026-72821No exploit | Grav Form Plugin before 9.1.15 Stored XSS via Radio Togglegetgrav · grav · CWE-79 | Medium5.1 | — | 0.2% | Aug 14, 2026 |
- CVE-2026-11206428Monitor
SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
HighCVSS 7.1No exploitEPSS 0%typo3 · extension "sgalinski cookie consent"Oct 20, 2026
- CVE-2026-7713221Monitor
TYPO3 CMS - Information Disclosure via Backend Localization Wizard
MediumCVSS 5.3No exploitEPSS 0%typo3 · typo3 cmsSep 8, 2026
- CVE-2026-7282120Monitor
Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle
MediumCVSS 5.1No exploitEPSS 0%getgrav · gravAug 14, 2026