Note
Hi there! I'm Valentin Lobstein, a pentester and cybersecurity student at Oteria Cyber School.
Passionate about ethical hacking, vulnerability research, and software development.
Committed to sharing knowledge and uplifting the cybersecurity community via my GitHub repositories. 🌐💡
🧰 Skills & Languages
📚 Repositories
| Tool | Description | Link |
|---|---|---|
| WPProbe | Fast WordPress plugin enumeration | GitHub |
| LFIHunt | Scan & exploit Local File Inclusion (LFI) | GitHub |
| LeakPy | Query LeakIX.net API via Python | GitHub |
🏆 Hall Of Fame
🚨 CVE Contributions
| CVE Identifier | Description | Links |
|---|---|---|
| 🔒 CVE-2023-50917 | Remote Code Execution in MajorDoMo | GitHub |
| 🔒 CVE-2024-22899 to CVE-2024-22903, CVE-2024-25228 | Exploit chain in Vinchin Backup & Recovery | GitHub |
| 🔒 CVE-2024-30920 to CVE-2024-30929, CVE-2024-31818 | Research and exploitation in DerbyNet | GitHub |
| 🔒 CVE-2024-31819 | Unauthenticated RCE in WWBN AVideo via systemRootPath |
GitHub |
| 🔒 CVE-2024-3032 | Themify Builder < 7.5.8 – Open Redirect | WPScan |
| 🔒 CVE-2025-2609 & CVE-2025-2610 | Stored XSS in MagnusBilling 7.x (one unauthenticated) | Blog · VulnCheck |
| 🔒 CVE-2025-2292, CVE-2025-30004, CVE-2025-30005 & CVE-2025-30006 | Authenticated vulnerabilities in Xorcom CompletePBX ≤ 5.2.35 | File Disclosure · Command Injection · Path Traversal · Reflected XSS |
🚨 Exploit Development & PoC
All PoCs and Metasploit modules consolidated in:
Chocapikk/msf-exploit-collection
☁️ LeakIX
- Moderator & vulnerability hunter
- Notable finding: Massive PSaux ransomware attack affecting 22,000 CyberPanel instances (BleepingComputer)
- Follow on Twitter: @leak_ix
🤓 Stats for Nerds
Views
🎶 Spotify
Caution
Please use the information and exploits provided in my repositories for educational purposes and responsible disclosure only. I am not responsible for any misuse or damage caused by using these tools, scripts, or exploits.