Diaa Hanna comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset
webapps php

Sagar Banwa WEBIGniter v28.7.23 - Stored Cross Site Scripting (XSS)
webapps php

ardr JFrog Artifactory < 7.25.4 - Blind SQL Injection
webapps php

Anas Zakir Wondercms 4.3.2 - XSS to RCE
webapps multiple

Jonas Benjamin Friedli SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration
webapps multiple CVE-2023-3897

SoSPiro Employee Management System v1 - 'email' SQL Injection
webapps php

Egidio Romano phpFox < 4.8.13 - (redirect) PHP Object Injection Exploit
webapps php

Musyoka Ian Metabase 0.46.6 - Pre-Auth Remote Code Execution
webapps linux

Omer Shaik SISQUALWFM 7.1.319.103 - Host Header Injection
webapps multiple

Or4nG.M4N Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over
webapps php

Metin Yunus Kandemir ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
webapps windows

Parsa Rezaie Khiabanloo Splunk 9.0.4 - Information Disclosure
webapps multiple

yozgatalperen1 Online Nurse Hiring System 1.0 - Time-Based SQL Injection
webapps php

yozgatalperen1 Rail Pass Management System 1.0 - Time-Based SQL Injection
webapps php

Milad karimi Wordpress Seotheme - Remote Code Execution Unauthenticated
webapps php

Milad karimi Wordpress Augmented-Reality - Remote Code Execution Unauthenticated
webapps php