Public IDs
Selected CVE notes
Private-program work stays off this list. Contact stays on the page.
cve // livelab
radar--:--:--
100+ HoF2430+ vulns1100+ P112+ yearsAPPLEMICROSOFTMETAIBM
100+ HoF2430+ vulns1100+ P112+ yearsAPPLEMICROSOFTMETAIBM
| ID | Year | Sev | Target | |
|---|---|---|---|---|
| CVE-2025-55182 | 2025 | Critical | Next.js RSC | RSC deserialization class |
| CVE-2025-29927 | 2025 | High | Next.js | Middleware auth bypass class |
| CVE-2026-41940 | 2026 | Critical | cPanel / WHM | Session-file issue |
| CVE-2026-39808 | 2026 | Critical | FortiSandbox | Unauth command injection class |
| CVE-2026-44578 | 2026 | High | Next.js | WebSocket upgrade SSRF class |
| CVE-2023-38646 | 2023 | Critical | Metabase | Pre-auth RCE via setup token path |
| CVE-2021-3129 | 2021 | Critical | Laravel / Ignition | Debug file write chained to RCE |
Hall of fame
Programs
AppleHoF · 2018–
MicrosoftHoF · 2016–
MetaHoF · 2017–
IBMHoF · 2019–
Intigritiplatform
Bugcrowdplatform
HackerOneplatform
YesWeHackplatform
100+HoF entries
2430+Vulns reported
1100+P1 critical
12+Years exp