← All credits
Valentin Holubec of akailabs
21 vulnerability records and advisories credit this contributor.
CVE-2026-63159
Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover
CVE-2026-63158
Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies
CVE-2026-63157
Omnispace Agora Project < 26.10.0 Stored XSS via Links Module
CVE-2026-63156
Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter
CVE-2026-63154
Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]
CVE-2026-63153
Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()
CVE-2026-63152
Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter
CVE-2026-63149
Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()
CVE-2026-63148
Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename
CVE-2026-63147
Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name