heinjame Bitrix24 - Remote Code Execution (RCE) (Authenticated)
webapps php

Clement MAILLIOUX Bookeen Notea - Directory Traversal
remote android CVE-2021-45783

Aydin Naserifard Magento eCommerce CE v2.3.5-p2 - Blind SQLi
webapps php

Roel van Beurden WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)
webapps php CVE-2022-1103

LiquidWorm USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor
remote hardware

Behrad Taher WebTareas 2.4 - Blind SQLi (Authenticated)
webapps php CVE-2021-43481

cxosmo Akka HTTP 10.1.14 - Denial of Service
remote multiple CVE-2021-42697

Eren Gozaydin Microfinance Management System 1.0 - 'customer_number' SQLi
webapps php

Ünsal Furkan Harani ImpressCMS v1.4.4 - Unrestricted File Upload
webapps php

Greenwolf GitLab 14.9 - Stored Cross-Site Scripting (XSS)
webapps ruby CVE-2022-1175

Greenwolf Gitlab 14.9 - Authentication Bypass
webapps ruby CVE-2022-1162

bios EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path
local windows

bios PTPublisher v2.3.4 - Unquoted Service Path
local windows

Ali J Fuel CMS 1.5.0 - Cross-Site Request Forgery (CSRF)
webapps php

AkuCyberSec WordPress Plugin Elementor 3.6.2 - Remote Code Execution (RCE) (Authenticated)
webapps php

Hemant Kashyap PKP Open Journals System 3.3 - Cross-Site Scripting (XSS)
webapps php CVE-2022-24181