technical-laohu records
3 published records for vendor technical-laohu.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
8Monitor | CVE-2026-1152No exploit | technical-laohu mpay QR Code Image unrestricted uploadtechnical-laohu · mpay · CWE-284 | Low2.0 | — | 0.3% | Jan 19, 2026 |
8Monitor | CVE-2026-1153No exploit | technical-laohu mpay cross-site request forgerytechnical-laohu · mpay · CWE-352 | Low2.1 | — | 0.2% | Jan 19, 2026 |
7Monitor | CVE-2026-1151No exploit | technical-laohu mpay User Center cross site scriptingtechnical-laohu · mpay · CWE-79 | Low1.9 | — | 0.2% | Jan 19, 2026 |
- CVE-2026-11528Monitor
technical-laohu mpay QR Code Image unrestricted upload
LowCVSS 2.0No exploitEPSS 0%technical-laohu · mpayJan 19, 2026
- CVE-2026-11538Monitor
technical-laohu mpay cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%technical-laohu · mpayJan 19, 2026
- CVE-2026-11517Monitor
technical-laohu mpay User Center cross site scripting
LowCVSS 1.9No exploitEPSS 0%technical-laohu · mpayJan 19, 2026