← All credits
Saidakbarxon Maxsudxonov
28 vulnerability records and advisories credit this contributor.
CVE-2026-57863
Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint
CVE-2026-57862
Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation
CVE-2026-11425
Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
CVE-2026-71294
Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actions
CVE-2026-71293
Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variable
CVE-2026-71292
Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter
CVE-2026-71291
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering
CVE-2026-71289
NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API
CVE-2026-71288
Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl
CVE-2026-71287
Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection