← All credits
Valentin Lobstein (Chocapikk)
90 vulnerability records and advisories credit this contributor.
CVE-2026-27760
OpenCATS PHP Code Injection via installer AJAX endpoint
CVE-2026-26210
KTransformers Unsafe Deserialization RCE via balance_serve
CVE-2026-25873
OmniGen2-RL Reward Server Unsafe Deserialization RCE
CVE-2026-23696
Windmill < 1.603.3 File Ownership Handling SQLi RCE
CVE-2026-22683
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
CVE-2025-2611
ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE
CVE-2026-104080
Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token
CVE-2026-77879
Control Web Panel (CWP) < 1.16 SQL Injection via access_token() API
CVE-2026-105606
Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8
CVE-2026-77881
Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter