Vibhor Sharma Broken Access Control - on NodeBB v3.6.7
webapps multiple

Sean Pesce Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
remote multiple

Jarod Jaslow (MAWK) Nagios XI Version 2024R1.01 - SQL Injection
webapps multiple

MaanVader Atlassian Confluence < 8.5.3 - Remote Code Execution
webapps multiple

Calil Khalil vm2 - sandbox escape
local multiple

Shahzaib Ali Khan SnipeIT 6.2.1 - Stored Cross Site Scripting
webapps multiple

Abdualhadi khalifa VMware Cloud Director 10.5 - Bypass identity verification
remote multiple

Andrzej Olchawa_ Milenko Starcik OSGi v3.7.2 (and below) Console - RCE
webapps multiple

Andrzej Olchawa_ Milenko Starcik OSGi v3.8-3.18 Console - RCE
webapps multiple

Youssef Muhammad Adobe ColdFusion versions 2018_15 (and earlier) and 2021_5 and earlier - Arbitrary File Read
webapps multiple

Melvin Mejia Easywall 0.3.1 - Authenticated Remote Command Execution
webapps multiple

George Washington A-PDF All to MP3 Converter 2.0.0 - DEP Bypass via HeapCreate + HeapAlloc
local multiple

tmrswrr Magento ver. 2.4.6 - XSLT Server Side Injection
webapps multiple

Emir Polat Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit)
webapps multiple

decrazyo Executables Created with perl2exe < V30.10C - Arbitrary Code Execution
remote multiple

hyp3rlinx Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'
remote multiple CVE-2024-25735