← All credits
Valentin Lobstein (Chocapikk)
74 vulnerability records and advisories credit this contributor.
CVE-2025-2610
MagnusBilling Stored Cross-Site Scripting in Alarm Module
CVE-2025-2609
MagnusBilling Stored Cross-Site Scripting in Login Logs
CVE-2026-73373
Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2
CVE-2026-14863
FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
CVE-2026-66732
Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager
CVE-2026-66733
Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache
CVE-2025-34452
Streama Subtitle Download Path Traversal and SSRF Leading to Arbitrary File Write
CVE-2026-60105
Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass
CVE-2026-26220
LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCE
CVE-2026-26215
manga-image-translator Shared API Unsafe Deserialization RCE