← All credits
Valentin Lobstein (Chocapikk)
90 vulnerability records and advisories credit this contributor.
CVE-2026-77878
Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API
CVE-2026-77877
Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access
CVE-2026-73697
Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor
CVE-2026-73696
Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex
CVE-2026-104085
odt2spip < 4.4.0 OS Command Injection via Document Filename
CVE-2025-30006
Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting
CVE-2026-89035
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
CVE-2026-49950
Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
CVE-2026-43643
Softaculous Virtualizor Authorization Bypass via Billing Module Handler
CVE-2026-43642
Softaculous Virtualizor PHP Object Injection via Billing Module Handler