Alibek Baxtiyorov

Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages

Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename

Fledge IoT Gateway Backup Restore Tar Path Traversal

ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filter

go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch

Zigbee2MQTT External JS Extension Path Traversal Leading to Remote Code Execution

rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluation

rust-iot-platform Authentication Bypass via Non-Validated Authorization Header

Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Parameter

OpenBK7231T - Reflected XSS via OTA host Parameter