dillonkirsch

2 exploits Active since Jan 2026

CVE-2021-41074 NOMISEC MEDIUM WRITEUP

QloApps hotel eCommerce 1.5.1 - CSRF

A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.

CVSS 5.4

View Code

CVE-2026-26720 WRITEUP CRITICAL WORKING POC

Twenty CRM < 1.15.0 - Remote Code Execution via Local Driver Module

An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.

CVSS 9.8

View Code