Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
HuLaSpark CVE-2026-119652
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that allows authenticated users to view othe
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
HuLaSpark CVE-2026-119651
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows authenticated users to delete other u
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
HuLaSpark CVE-2026-119650
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows authenticated users to access other users'
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
HuLaSpark hulaspark-2026-10
HuLaSpark Security Releases - October 2026
3 CVEs and 3 credit lines. None claimed yet.
0 of 3 credit lines claimed Claim credit