← All credits
Valentin Lobstein (Chocapikk)
56 vulnerability records and advisories credit this contributor.
CVE-2026-28516
openDCIM <= 23.04 SQL Injection in Config::UpdateParameter
CVE-2026-28515
openDCIM <= 23.04 Missing Authorization in install.php
CVE-2026-27760
OpenCATS PHP Code Injection via installer AJAX endpoint
CVE-2026-29514
NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin
CVE-2026-60105
Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass
CVE-2026-26220
LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCE
CVE-2026-26215
manga-image-translator Shared API Unsafe Deserialization RCE
CVE-2026-26210
KTransformers Unsafe Deserialization RCE via balance_serve
CVE-2026-25874
LeRobot Unsafe Deserialization Remote Code Execution via gRPC
CVE-2026-23696
Windmill < 1.603.3 File Ownership Handling SQLi RCE