Armando Huesca Prida Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting (XSS)
remote hardware CVE-2024-43687

Armando Huesca Prida Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
remote hardware CVE-2024-9054

Nishanth Gaddam AppSmith 1.47 - Remote Code Execution (RCE)
webapps java CVE-2024-55963

Seth Kraft Nagios Log Server 2024R1.3.1 - Stored XSS
webapps multiple CVE-2025-29471

sud0 ollama 0.6.4 - Server Side Request Forgery (SSRF)
local multiple

LiquidWorm ABB Cylon Aspect 3.07.02 - File Disclosure
webapps multiple CVE-na

Kjesper Webmin Usermin 2.100 - Username Enumeration
webapps perl CVE-2024-44762

Metin Yunus Kandemir Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
remote windows CVE-2024-38200

LiquidWorm ABB Cylon Aspect 3.07.01 - Hard-coded Default Credentials
webapps php CVE-2024-4007

4m3rr0r Vite 6.2.2 - Arbitrary File Read
remote multiple CVE-2025-30208

C41Tx90 SAP NetWeaver - 7.53 - HTTP Request Smuggling
remote multiple CVE-2022-22536

LiquidWorm ABB Cylon Aspect 3.08.01 - Arbitrary File Delete
webapps php CVE-2024-6209

LiquidWorm ABB Cylon Aspect 3.08.01 - Remote Code Execution (RCE)
webapps multiple CVE-2024-6298

arfaoui haythem Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
webapps php CVE-2024-42831

Mehran Seifalinia XWiki Standard 14.10 - Remote Code Execution (RCE)
webapps php CVE-2023-48292

Thomas Heverin Solstice Pod 6.2 - API Session Key Extraction via API Endpoint
local windows