Y4tacker
4 credited records · 1 in the last 12 months · 1 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
4Monitor | CVE-2026-23901No exploit | Apache Shiro: Brute force attack possible to determine valid user namesapache · shiro · CWE-208 | Low1.0 | — | 0.2% | Feb 10, 2026 |
36Monitor | CVE-2024-51504No exploit | Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Serverapache · zookeeper · CWE-290 | Critical9.1 | — | 0.9% | Nov 7, 2024 |
99Now | CVE-2024-38856Weaponized | Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering codeapache · ofbiz · CWE-863 | Critical9.8 | KEV | 99.4% | Aug 5, 2024 |
40Plan | CVE-2022-40664No exploit | Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcherapache · shiro · CWE-287 | Critical9.8 | — | 3.6% | Oct 12, 2022 |
- CVE-2026-239014Monitor
Apache Shiro: Brute force attack possible to determine valid user names
LowCVSS 1.0No exploitEPSS 0%apache · shiroFeb 10, 2026
- CVE-2024-5150436Monitor
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
CriticalCVSS 9.1No exploitEPSS 0%apache · zookeeperNov 7, 2024
- CVE-2024-3885699Now
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
CriticalCVSS 9.8KEVWeaponizedEPSS 99%apache · ofbizAug 5, 2024
- CVE-2022-4066440Plan
Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
CriticalCVSS 9.8No exploitEPSS 3%apache · shiroOct 12, 2022