Amirhossein Bahramizadeh Sales of Cashier Goods v1.0 - Cross Site Scripting (XSS)
webapps php CVE-2023-36346

Mirabbas Ağalarov Rukovoditel 3.4.1 - Multiple Stored XSS
webapps php

Furkan Karaarslan Xenforo Version 2.2.13 - Authenticated Stored XSS
webapps php

Amirhossein Bahramizadeh Azure Apache Ambari 2302250400 - Spoofing
remote multiple CVE-2023-23408

Amirhossein Bahramizadeh PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory
webapps php CVE-2023-30198

Amirhossein Bahramizadeh Windows 11 22h2 - Kernel Privilege Elevation
local windows CVE-2023-28293

Amirhossein Bahramizadeh Microsoft SharePoint Enterprise Server 2016 - Spoofing
webapps multiple CVE-2023-28288

Victor A. Morales MCL-Net 4.3.5.8788 - Information Disclosure
webapps hardware CVE-2023-34834

Tejas Pingulkar NCH Express Invoice - Clear Text Password Storage and Account Takeover
local windows CVE-2020-11560

Tejas Pingulkar Smart Office Web 20.28 - Remote Information Disclosure (Unauthenticated)
webapps aspx CVE-2022-47076;CVE-2022-47075

nu11secur1ty Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing
remote multiple

dreizehnutters HiSecOS 04.0.01 - Privilege Escalation
webapps hardware

Amirhossein Bahramizadeh Nokia ASIKA 7.13.52 - Hard-coded private key disclosure
remote hardware CVE-2023-25187

Amirhossein Bahramizadeh Super Socializer 7.13.52 - Reflected XSS
webapps php CVE-2023-2779

Amirhossein Bahramizadeh WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)
webapps php CVE-2023-3320

Amirhossein Bahramizadeh WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password
webapps php CVE-2020-11027