thoughtfault phpfm v1.7.9 - Authentication type juggling
webapps php

thoughtfault PimpMyLog v1.7.14 - Improper access control
webapps php

GatoGamer1155 Spring Cloud 3.2.2 - Remote Command Execution (RCE)
webapps java CVE-2022-22963

ieduardogoncalves D-Link DAP-1325 - Broken Access Control
webapps hardware

Tejas Pingulkar NCH Express Invoice - Clear Text Password Storage and Account Takeover
local windows CVE-2020-11560

Tejas Pingulkar Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
webapps aspx CVE-2022-47076;CVE-2022-47075

Gabriel Lima PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)
webapps python CVE-2023-0297

Galoget Latorre Thruk Monitoring Web Interface 3.06 - Path Traversal
webapps perl CVE-2023-34096

RedTeam Pentesting GmbH STARFACE 7.3.0.10 - Authentication with Password Hash Possible
webapps jsp CVE-2023-33243

RedTeam Pentesting GmbH Pydio Cells 4.1.2 - Server-Side Request Forgery
webapps go CVE-2023-32750

RedTeam Pentesting GmbH Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download
webapps go CVE-2023-32751

RedTeam Pentesting GmbH Pydio Cells 4.1.2 - Unauthorised Role Assignments
webapps go CVE-2023-32749

URGAN Faculty Evaluation System 1.0 - Unauthenticated File Upload
webapps php CVE-2023-33440

Ege Balci Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit)
remote multiple CVE-2018-8065

PARAG BAGUL Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
webapps ruby CVE-2023-30145

neg0x SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
webapps multiple CVE-2023-33829