LiquidWorm Tenda HG6 v3.3.0 - Remote Command Injection
remote hardware

Altelus Anuko Time Tracker - SQLi (Authenticated)
webapps php CVE-2022-24707

Konstantin Burov Apache CouchDB 3.2.1 - Remote Code Execution (RCE)
remote linux CVE-2022-24706

Netanel Cohen Wondershare Dr.Fone 12.0.7 - Remote Code Execution (RCE)
remote windows CVE-2021-44596

Netanel Cohen Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)
local windows CVE-2021-44595

UNICORD ExifTool 12.23 - Arbitrary Code Execution
local linux CVE-2021-22204

Hubert Wojciechowski e107 CMS v3.2.1 - Multiple Vulnerabilities
webapps php

Tin Pham Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)
webapps multiple CVE-2021-31673

Tin Pham Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)
webapps multiple CVE-2021-31674

Ahmed Alroky DLINK DIR850 - Open Redirect
remote hardware CVE-2021-46379

Ahmed Alroky DLINK DIR850 - Insecure Access Control
remote hardware CVE-2021-46378

Yehia Elghaly Prime95 Version 30.7 build 9 - Remote Code Execution (RCE)
remote windows

Metin Yunus Kandemir ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure
remote windows CVE-2022-29457

AkuCyberSec Wondershare Dr.Fone 11.4.10 - Insecure File Permissions
local windows

Edgar Carrillo Egea TCQ - ITeCProteccioAppServer.exe - Unquoted Service Path
local windows

Edgar Carrillo Egea UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path
local windows