Ryan Kozak

Hacking, CVEs, Development, and Other Things.

About Me
Recent
MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via mdjm_email_upload_file Parameter
Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload
g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion
g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure

© 2026 . All rights reserved.

MDJM Event Management

2026

MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via mdjm_email_upload_file Parameter June 5, 2026