← All credits
Valentin Lobstein (Chocapikk)
74 vulnerability records and advisories credit this contributor.
CVE-2026-104080
Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token
CVE-2026-77879
Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API
CVE-2026-105606
Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8
CVE-2026-77881
Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter
CVE-2026-77878
Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API
CVE-2026-77877
Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access
CVE-2026-73697
Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor
CVE-2026-73696
Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex
CVE-2026-104085
odt2spip < 4.4.0 OS Command Injection via Document Filename
CVE-2025-30006
Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting