Skip to content
Noroxi

EVIL0RD

21 credited records · 21 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for EVIL0RD

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Port scanning: 5 full scans a day (members only)
  • Uptime monitoring: 1 site, instant email when it goes down
  • Verify your domain: subdomains and takeover risk scanned every week
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-105131
    21Monitor

    mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    mayswind · ezbookkeepingOct 4, 2026

  • CVE-2026-105130
    25Monitor

    LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

    MediumCVSS 6.3No exploitEPSS 0%

    laradashboard · laradashboardOct 4, 2026

  • CVE-2026-105129
    28Monitor

    LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

    HighCVSS 7.1No exploitEPSS 0%

    laradashboard · laradashboardOct 4, 2026

  • CVE-2026-105128
    21Monitor

    LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url

    MediumCVSS 5.3No exploitEPSS 0%

    laradashboard · laradashboardOct 4, 2026

  • CVE-2026-105127
    27Monitor

    LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

    MediumCVSS 6.9No exploitEPSS 0%

    laradashboard · laradashboardOct 4, 2026

  • CVE-2026-105126
    34Monitor

    LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

    HighCVSS 8.6No exploitEPSS 0%

    laradashboard · laradashboardOct 4, 2026

  • CVE-2026-105125
    25Monitor

    LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

    MediumCVSS 6.3No exploitEPSS 0%

    laradashboard · laradashboardOct 4, 2026

  • CVE-2026-93923
    34Monitor

    SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

    HighCVSS 8.6No exploitEPSS 1%

    siyuan-note · siyuanSep 18, 2026

  • CVE-2026-93922
    34Monitor

    SiYuan through 3.8.4 Stored XSS via notebook names

    HighCVSS 8.6No exploitEPSS 1%

    siyuan-note · siyuanSep 18, 2026

  • CVE-2026-93921
    21Monitor

    SiYuan through 3.8.4 Access Control Bypass via Dynamic Icon Endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    siyuan-note · siyuanSep 18, 2026

  • CVE-2026-92986
    34Monitor

    SiYuan before 3.8.4 Cross-Site Scripting via Document Title

    HighCVSS 8.6No exploitEPSS 1%

    siyuan-note · siyuanSep 17, 2026

  • CVE-2026-92985
    34Monitor

    SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels

    HighCVSS 8.6No exploitEPSS 1%

    siyuan-note · siyuanSep 17, 2026

  • CVE-2026-87930
    36Monitor

    MaxSite CMS through 109.6 PHP Object Injection via ci_session

    CriticalCVSS 9.2Proof of conceptEPSS 1%

    maxsite · maxsite cmsSep 9, 2026

  • CVE-2026-87929
    37Monitor

    MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

    CriticalCVSS 9.3No exploitEPSS 1%

    maxsite · maxsite cmsSep 9, 2026

  • CVE-2026-87928
    20Monitor

    MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page

    MediumCVSS 5.1No exploitEPSS 0%

    maxsite · maxsite cmsSep 9, 2026

  • CVE-2026-87927
    35Monitor

    MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher

    HighCVSS 8.8No exploitEPSS 1%

    maxsite · maxsite cmsSep 9, 2026

  • CVE-2026-87821
    28Monitor

    Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch

    HighCVSS 7.1No exploitEPSS 0%

    laradashboard · laradashboardSep 9, 2026

  • CVE-2026-86438
    34Monitor

    Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action

    HighCVSS 8.6No exploitEPSS 1%

    laradashboard · laradashboardSep 7, 2026

  • CVE-2026-86437
    34Monitor

    Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload

    HighCVSS 8.6No exploitEPSS 1%

    laradashboard · laradashboardSep 7, 2026

  • CVE-2026-86436
    21Monitor

    Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints

    MediumCVSS 5.3No exploitEPSS 1%

    laradashboard · laradashboardSep 7, 2026

  • CVE-2026-86184
    37Monitor

    Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route

    CriticalCVSS 9.3No exploitEPSS 1%

    laradashboard · laradashboardSep 5, 2026