Plane 0.23.1 - Server side request forgery (SSRF)

Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path

OpenCart Core 4.0.2.3 - 'search' SQLi

Moodle LMS 4.0 - Cross-Site Scripting (XSS)

OpenCart v3.x Newsletter Module - Blind SQLi

MiniTool Partition Wizard - Unquoted Service Path

Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path

BattlEye 0.9 - 'BEService' Unquoted Service Path

McAfee(R) Safe Connect VPN - Unquoted Service Path Elevation Of Privilege

Private Internet Access 3.3 - 'pia-service' Unquoted Service Path

HMA VPN 5.3 - Unquoted Service Path

Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection

Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass

Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection

Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)

Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)