← All credits
Valentin Lobstein (Chocapikk)
56 vulnerability records and advisories credit this contributor.
CVE-2026-43642
Softaculous Virtualizor PHP Object Injection via Billing Module Handler
CVE-2026-43641
Softaculous Virtualizor OS Command Injection via Billing Module Handler
CVE-2026-43643
Softaculous Virtualizor Authorization Bypass via Billing Module Handler
CVE-2026-73698
FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action
CVE-2026-73694
FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition
CVE-2026-73693
FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler
CVE-2026-73699
FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()
CVE-2025-2610
MagnusBilling Stored Cross-Site Scripting in Alarm Module
CVE-2025-2609
MagnusBilling Stored Cross-Site Scripting in Login Logs
CVE-2026-73373
Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2