Skip to content
Noroxi

https://github.com/wxiaoguang

17 credited records · 17 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for https://github.com/wxiaoguang

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Port scanning: 5 full scans a day (members only)
  • Uptime monitoring: 1 site, instant email when it goes down
  • Verify your domain: subdomains and takeover risk scanned every week
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-73804
    0Monitor

    Gitea API token scope escalation through HTTP signatures

    No exploit

    gitea · giteaToday

  • CVE-2026-73130
    17Monitor

    Gitea repository initialization resource exhaustion

    MediumCVSS 4.3No exploit

    gitea · giteaToday

  • CVE-2026-71301
    17Monitor

    Gitea private pull request title disclosure through markup

    MediumCVSS 4.3No exploit

    gitea · giteaToday

  • CVE-2026-96589
    17Monitor

    Gitea private repository access retained after rejected transfer

    MediumCVSS 4.3No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-96404
    32Monitor

    Gitea installer authentication bypass for existing accounts

    HighCVSS 8.1No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-96400
    17Monitor

    Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS

    MediumCVSS 4.3No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-96399
    30Monitor

    Gitea denial of service through external issue tracker patterns

    HighCVSS 7.5No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-95112
    26Monitor

    Gitea issue reference parsing CPU exhaustion

    MediumCVSS 6.5No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-89430
    32Monitor

    Gitea push mirror SSRF and forced writes to internal Git hosts

    HighCVSS 8.1No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-79960
    28Monitor

    Gitea deploy key pushes acting as the repository owner

    HighCVSS 7.1No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-70357
    30Monitor

    Gitea repository migration SSRF through DNS rebinding

    HighCVSS 7.5No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-104636
    30Monitor

    Gitea SSRF through Git HTTP redirects in mirrors and fetches

    HighCVSS 7.5No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-103667
    21Monitor

    Gitea container registry stored XSS through blob media type

    MediumCVSS 5.4No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-103504
    32Monitor

    Gitea API team demotion not applied to unit permissions

    HighCVSS 8.1No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-103059
    36Monitor

    Gitea built-in SSH server authentication bypass through key case folding

    CriticalCVSS 9.1No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-101029
    17Monitor

    Gitea migration and pull mirror SSRF through multi-answer DNS

    MediumCVSS 4.3No exploitEPSS 0%

    gitea · giteaOct 6, 2026

  • CVE-2026-101027
    30Monitor

    Gitea migration SSRF through ALLOWED_DOMAINS address check bypass

    HighCVSS 7.7No exploitEPSS 0%

    gitea · giteaOct 6, 2026