XBOW
4 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2025-8868Proof of concept | Chef Automate compliance service SQL Injection Vulnerabilitychef · automate · CWE-89 | High8.8 | — | 25.9% | Sep 29, 2025 |
31Monitor | CVE-2025-8264No exploit | Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend.CWE-89 | High7.9 | — | 0.4% | Jul 29, 2025 |
24Monitor | CVE-2025-0133Proof of concept | PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portalpalo alto networks · cloud ngfw · CWE-79 | Low2.7 | — | 46.2% | May 14, 2025 |
24Monitor | CVE-2025-27888Proof of concept | Apache Druid: Server-Side Request Forgery and Cross-Site Scriptingapache · druid · CWE-79 | Medium5.8 | — | 1.7% | Mar 20, 2025 |
- CVE-2025-886843Plan
Chef Automate compliance service SQL Injection Vulnerability
HighCVSS 8.8Proof of conceptEPSS 25%chef · automateSep 29, 2025
- CVE-2025-826431Monitor
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend.
HighCVSS 7.9No exploitEPSS 0%Jul 29, 2025
- CVE-2025-013324Monitor
PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal
LowCVSS 2.7Proof of conceptEPSS 46%palo alto networks · cloud ngfwMay 14, 2025
- CVE-2025-2788824Monitor
Apache Druid: Server-Side Request Forgery and Cross-Site Scripting
MediumCVSS 5.8Proof of conceptEPSS 1%apache · druidMar 20, 2025