SoSPiro Blood Bank & Donor Management System using v2.2 - Stored XSS
remote php

nu11secur1ty Equipment Rental Script-1.0 - SQLi
remote php

Ahmet Ümit BAYRAM 7 Sticky Notes v1.9 - OS Command Injection
local windows

Redway Security Splunk 9.0.5 - admin account take over
webapps multiple CVE-2023-32707

nu11secur1ty Shuttle-Booking-Software v1.0 - Multiple-SQLi
webapps php

nu11secur1ty Limo Booking Software v1.0 - CORS
webapps php

Mirabbas Ağalarov Webedition CMS v2.9.8.8 - Blind SSRF
webapps php

Antonio Francesco Sardella Cacti 1.2.24 - Authenticated command injection when using SNMP options
webapps php CVE-2023-39362

Furkan Karaarslan Wordpress Sonaar Music Plugin 4.7 - Stored XSS
webapps php

Mirabbas Ağalarov Coppermine Gallery 1.6.25 - RCE
webapps php

Florent MONTEL Media Library Assistant Wordpress Plugin - RCE and LFI
webapps php CVE-2023-4634

nu11secur1ty WEBIGniter v28.7.23 File Upload - Remote Code Execution
webapps php

Revan Arifio Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation
webapps php CVE-2023-4278

LiquidWorm Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Admin Password Change
remote hardware

LiquidWorm Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Credentials Extraction
remote hardware

LiquidWorm Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service
dos hardware