Momen Eldawakhly Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting (XSS)
webapps multiple CVE-2021-46387

Rik Lutz Prowise Reflect v1.0.9 - Remote Keystroke Injection
remote windows

Rik Lutz Xerte 3.9 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-44664

Rik Lutz Xerte 3.10.3 - Directory Traversal (Authenticated)
webapps php CVE-2021-44665

Momen Eldawakhly WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation
remote hardware

Mayank Deshmukh Casdoor 1.13.0 - SQL Injection (Unauthenticated)
webapps multiple CVE-2022-24124

Luis Martínez Cobian Backup Gravity 11.2.0.582 - 'CobianBackup11' Unquoted Service Path
local windows

Luis Martínez Cobian Backup 11 Gravity 11.2.0.582 - 'Password' Denial of Service (PoC)
local windows

Luis Martínez Cobian Reflector 0.9.93 RC1 - 'Password' Denial of Service (PoC)
local windows

Ghuliev Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated)
webapps linux

Luis Martínez Wondershare MirrorGo 2.0.11.346 - Insecure File Permissions
local windows

Talha Karakumru Microweber CMS 1.2.10 - Local File Inclusion (Authenticated) (Metasploit)
webapps php

Antonio Cuomo WebHMI 4.1 - Stored Cross Site Scripting (XSS) (Authenticated)
webapps php

Antonio Cuomo WebHMI 4.1.1 - Remote Code Execution (RCE) (Authenticated)
webapps php

LiquidWorm ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 - Remote File CRUD
remote hardware CVE-2022-25359

Mohd. Anees Student Record System 1.0 - 'cid' SQLi (Authenticated)
webapps php