Valentin Lobstein (Chocapikk)

AVideo < 20.1 IDOR Arbitrary Comment Image Upload

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1

Softaculous Virtualizor PHP Object Injection via Billing Module Handler

AVideo < 20.1 IDOR Arbitrary Video Rotation

Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Softaculous Virtualizor OS Command Injection via Billing Module Handler

Softaculous Virtualizor Authorization Bypass via Billing Module Handler

FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection

FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action