Osama Yousef PandoraFMS 7.0NG.772 - SQL Injection
webapps php CVE-2023-44088

Seth Kraft Nagios Log Server 2024R1.3.1 - Stored XSS
webapps multiple CVE-2025-29471

arfaoui haythem Elaine's Realtime CRM Automation 6.18.17 - Reflected XSS
webapps php CVE-2024-42831

Mehran Seifalinia XWiki Standard 14.10 - Remote Code Execution (RCE)
webapps php CVE-2023-48292

Jobyer From Bytium CodeCanyon RISE CRM 3.7.0 - SQL Injection
webapps php CVE-2024-8945

Alessio Romano (sfoffo) NoteMark < 0.13.0 - Stored XSS
webapps multiple

Alessio Romano (sfoffo)_ Riccardo Degli Esposti (partywave) Invesalius3 - Remote Code Execution
webapps python

Sohel Yousef Xhibiter NFT Marketplace 1.10.2 - SQL Injection
webapps php

Elhussain Fathy SolarWinds Platform 2024.1 SR1 - Race Condition
webapps multiple CVE-2024-28999

Gabriel Felipe iMLog < 1.307 - Persistent Cross Site Scripting (XSS)
webapps php

Abdualhadi khalifa Apache OFBiz 18.12.12 - Directory Traversal
webapps java CVE-2024-32113

Abdualhadi khalifa Wordpress Theme XStore 9.3.8 - SQLi
webapps php CVE-2024-33559

Abdualhadi khalifa CrushFTP < 11.1.0 - Directory Traversal
remote multiple

Maerifat Majeed Flowise 1.6.5 - Authentication Bypass
webapps typescript CVE-2024-31621

Kr0ff Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
remote linux_x86-64 CVE-2024-3400

Julio Ángel Ferrari Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter
webapps php