RedTeam Pentesting GmbH Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download
webapps go CVE-2023-32751

RedTeam Pentesting GmbH Pydio Cells 4.1.2 - Unauthorised Role Assignments
webapps go CVE-2023-32749

URGAN Faculty Evaluation System 1.0 - Unauthenticated File Upload
webapps php CVE-2023-33440

AFFAN AHMED Online Security Guards Hiring System 1.0 - Reflected XSS
webapps php CVE-2023-0527

AFFAN AHMED unilogies/bumsys v1.0.3 beta - Unrestricted File Upload
webapps php CVE-2023-0455

nu11secur1ty SCRMS 2023-05-27 1.0 - Multiple SQL Injection
webapps php

Mirabbas Ağalarov Rukovoditel 3.3.1 - CSV injection
webapps php

PARAG BAGUL Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)
webapps ruby CVE-2023-30145

neg0x SCM Manager 1.60 - Cross-Site Scripting Stored (Authenticated)
webapps multiple CVE-2023-33829

Mirabbas Ağalarov Ulicms 2023.1 - create admin user via mass assignment
webapps php

Mirabbas Ağalarov Zenphoto 1.6 - Multiple stored XSS
webapps php

Mirabbas Ağalarov WBCE CMS 1.6.1 - Multiple Stored Cross-Site Scripting (XSS)
webapps php

ASHIK KUNJUMON Service Provider Management System v1.0 - SQL Injection
webapps php CVE-2023-34581

Andrea Intilangelo FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)
webapps multiple CVE-2023-25439

Andrea Intilangelo CiviCRM 5.59.alpha1 - Stored XSS (Cross-Site Scripting)
webapps php CVE-2023-25440

Rahad Chowdhury ChurchCRM v4.5.4 - Reflected XSS via Image (Authenticated)
webapps php CVE-2023-31699