Matéo Florian Callec

Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL

Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For

Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing

exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values

exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename

exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization

exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression