p1ckzi NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)
webapps php

Amel BOUZIANE-LEBLOND Geonetwork 4.2.0 - XML External Entity (XXE)
webapps multiple

Giulio Garzia Ozozuz Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)
webapps php CVE-2022-33098

Vulnz Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
webapps multiple

Saud Alenazi OpenCart v3.x Newsletter Module - Blind SQLi
webapps php

Eren Gozaydin Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated)
webapps php CVE-2022-28080

Eren Gozaydin College Management System 1.0 - 'course_code' SQL Injection (Authenticated)
webapps php CVE-2022-28079

Yesith Alvarez F5 BIG-IP 16.0.x - Remote Code Execution (RCE)
remote multiple CVE-2022-1388

Hassan Khan Yusufzai WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated)
webapps php

Eren Gozaydin Microfinance Management System 1.0 - 'customer_number' SQLi
webapps php

Alexandre ZANNI Easy Appointments 1.4.2 - Information Disclosure
webapps php CVE-2022-0482

Saud Alenazi MiniTool Partition Wizard - Unquoted Service Path
local windows

Hassan Khan Yusufzai WordPress Plugin admin-word-count-column 2.2 - Local File Read
webapps php

Hassan Khan Yusufzai WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion
webapps php

Hassan Khan Yusufzai WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion
webapps php

Hassan Khan Yusufzai WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)
webapps php