← All credits

Nevo David

2 vulnerability records and advisories credit this contributor.

Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptions