← All credits
Valentin Lobstein (Chocapikk)
74 vulnerability records and advisories credit this contributor.
CVE-2026-28517
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
CVE-2026-28516
openDCIM <= 23.04 SQL Injection in Config::UpdateParameter
CVE-2026-28515
openDCIM <= 23.04 Missing Authorization in install.php
CVE-2026-27760
OpenCATS PHP Code Injection via installer AJAX endpoint
CVE-2026-26210
KTransformers Unsafe Deserialization RCE via balance_serve
CVE-2026-25873
OmniGen2-RL Reward Server Unsafe Deserialization RCE
CVE-2026-23696
Windmill < 1.603.3 File Ownership Handling SQLi RCE
CVE-2026-22683
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
CVE-2025-2611
ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE
CVE-2025-71451
Vembu BDRSuite < 7.6.0 XSS via serverbackupprogress.sgp