← All credits
Saidakbarxon Maxsudxonov
28 vulnerability records and advisories credit this contributor.
CVE-2026-93363
Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route
CVE-2026-60112
AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()
CVE-2026-58144
Cotonti Siena 0.9.26 Stored XSS via PFS Module ntitle Parameter
CVE-2026-58143
Cotonti Siena 0.9.26 CSRF via admin.php Config Update Endpoint
CVE-2026-57863
Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint
CVE-2026-57862
Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation
CVE-2026-11425
Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
CVE-2026-56721
CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController
CVE-2026-56720
CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action
CVE-2026-71294
Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actions