Krzysztof Burghardt qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)
dos hardware CVE-2022-46770

xThaz Covenant v0.5 - Remote Code Execution (RCE)
webapps multiple

Ameer Hamza Helmet Store Showroom v1.0 - SQL Injection
webapps php

d1z1n370/oPty iBooking v1.0.8 - Arbitrary File Upload
webapps php

Saud Alenazi Moodle LMS 4.0 - Cross-Site Scripting (XSS)
webapps php

zetc0de BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)
webapps php CVE-2022-3552

Jorge Manuel Lozano Gómez SugarSync 4.1.3 - 'SugarSync Service' Unquoted Service Path
local windows

Jorge Manuel Lozano Gómez HDD Health 4.2.0.112 - 'HDDHealth' Unquoted Service Path
local windows

Behrouz Mansoori Jetpack 11.4 - Cross Site Scripting (XSS)
webapps php

Luis Martínez Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
dos windows

Luis Martínez Gestionale Open 12.00.00 - 'DB_GO_80' Unquoted Service Path
local windows

Luis Martínez Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path
local windows

Rizacan Tufan Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi
webapps php CVE-2022-2840

p1ckzi Blink1Control2 2.2.7 - Weak Password Encryption
local multiple CVE-2022-35513

Luqman Hakim Zahari WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting (XSS)
webapps php

Luqman Hakim Zahari WordPress Plugin Testimonial Slider and Showcase 2.2.6 - Stored Cross-Site Scripting (XSS)
webapps php