kitu232
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2026-108108No exploit | PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()hotspotbilling · phpnuxbill · CWE-287 | High7.1 | — | 0.3% | Oct 9, 2026 |
37Monitor | CVE-2026-108107No exploit | PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.phphotspotbilling · phpnuxbill · CWE-89 | Critical9.3 | — | 0.4% | Oct 9, 2026 |
35Monitor | CVE-2026-35676No exploit | phpMyFAQ - Unauthenticated Password Reset via User Password Update Endpointthorsten · phpmyfaq · CWE-640 | High8.8 | — | 0.3% | May 28, 2026 |
21Monitor | CVE-2026-45009No exploit | phpMyFAQ - Insufficient Authorization Check in Admin API Endpointsthorsten · phpmyfaq · CWE-863 | Medium5.3 | — | 0.2% | May 15, 2026 |
- CVE-2026-10810828Monitor
PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
HighCVSS 7.1No exploitEPSS 0%hotspotbilling · phpnuxbillOct 9, 2026
- CVE-2026-10810737Monitor
PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php
CriticalCVSS 9.3No exploitEPSS 0%hotspotbilling · phpnuxbillOct 9, 2026
- CVE-2026-3567635Monitor
phpMyFAQ - Unauthenticated Password Reset via User Password Update Endpoint
HighCVSS 8.8No exploitEPSS 0%thorsten · phpmyfaqMay 28, 2026
- CVE-2026-4500921Monitor
phpMyFAQ - Insufficient Authorization Check in Admin API Endpoints
MediumCVSS 5.3No exploitEPSS 0%thorsten · phpmyfaqMay 15, 2026