← All credits
Bekzod Tursunov (Stalker)
4 vulnerability records and advisories credit this contributor.
CVE-2026-72593
dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access
CVE-2026-72592
dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload
CVE-2026-72581
duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint
CVE-2026-72580
duhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints