← All credits
Saidakbarxon Maxsudxonov
28 vulnerability records and advisories credit this contributor.
CVE-2026-93363
Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route
CVE-2026-57863
Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint
CVE-2026-57862
Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation
CVE-2026-56721
CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController
CVE-2026-56720
CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action
CVE-2026-11425
Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
CVE-2026-71294
Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actions
CVE-2026-71293
Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variable
CVE-2026-71292
Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter
CVE-2026-71291
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering