← All credits
Marco Paciaroni (BomboBombone)
25 vulnerability records and advisories credit this contributor.
CVE-2026-103446
WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments
CVE-2026-103585
attacker-controlled javascript license URL via XSS
CVE-2026-103584
attacker-controlled javascript license URL via XSS
CVE-2026-74239
XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows
CVE-2026-73321
XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
CVE-2026-73320
XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint
CVE-2026-73319
XenForo < 2.3.13 XSS via Dynamic Redirect Handler
CVE-2026-73318
XenForo < 2.3.13 Missing Authorization via force-agreement Controller
CVE-2026-73317
XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher
CVE-2026-73316
XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider