Devansh Bordia ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Takeover
webapps php

Ceylan BOZOĞULLARINDAN Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)
webapps php

Ven3xy Apache APISIX 2.12.1 - Remote Code Execution (RCE)
remote multiple CVE-2022-24112

FEBIN MON SAJI Tiny File Manager 2.4.6 - Remote Code Execution (RCE)
webapps php CVE-2021-45010;CVE-2021-40964

Ashish Koli Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2022-26965

Chris Anastasio Moodle 3.11.5 - SQLi (Authenticated)
webapps php

Faisal Alasmari VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path
local windows

Prof. Joas Antonio Baixar GLPI Project 9.4.6 - SQLi
webapps multiple

Sam Smith Tdarr 2.00.15 - Command Injection
remote multiple

Aryan Chehreghani Seowon SLR-120 Router - Remote Code Execution (Unauthenticated)
remote hardware CVE-2020-17456

Antonio Cuomo Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path
local windows

Antonio Cuomo WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Path
local windows

Saud Alenazi Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path
local windows

Hussien Misbah Zabbix 5.0.17 - Remote Code Execution (RCE) (Authenticated)
webapps php

Saud Alenazi BattlEye 0.9 - 'BEService' Unquoted Service Path
local windows

Saud Alenazi McAfee(R) Safe Connect VPN - Unquoted Service Path Elevation Of Privilege
local windows