CraCkEr Time Slot Booking Calendar 1.8 - Stored Cross-Site Scripting (XSS)
webapps php

nu11secur1ty spip v4.1.10 - Spoofing Admin account
webapps php

ieduardogoncalves D-Link DAP-1325 - Broken Access Control
webapps hardware

Mirabbas Ağalarov WebsiteBaker v2.13.3 - Directory Traversal
webapps php

Mirabbas Ağalarov WebsiteBaker v2.13.3 - Stored XSS
webapps php

yuyudhn POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)
webapps php CVE-2023-36348

redfire359 FuguHub 8.1 - Remote Code Execution
webapps multiple CVE-2023-24078

Amirhossein Bahramizadeh Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
webapps php CVE-2023-36346

Mirabbas Ağalarov Rukovoditel 3.4.1 - Multiple Stored XSS
webapps php

Furkan Karaarslan Xenforo Version 2.2.13 - Authenticated Stored XSS
webapps php

Amirhossein Bahramizadeh PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory
webapps php CVE-2023-30198

Amirhossein Bahramizadeh Microsoft SharePoint Enterprise Server 2016 - Spoofing
webapps multiple CVE-2023-28288

Victor A. Morales MCL-Net 4.3.5.8788 - Information Disclosure
webapps hardware CVE-2023-34834

Antonio Cuomo Bludit < 3.13.1 Backup Plugin - Arbitrary File Download (Authenticated)
webapps php

Tejas Pingulkar Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
webapps aspx CVE-2022-47076;CVE-2022-47075

dreizehnutters HiSecOS 04.0.01 - Privilege Escalation
webapps hardware