LiquidWorm Sielco Analog FM Transmitter 2.12 - 'id' Cookie Brute Force Session Hijacking
webapps hardware

Zer0FauLT InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal
webapps asp

nu11secur1ty Bludit 4.0.0-rc-2 - Account takeover
webapps php

Matisse Beckandt Online Computer and Laptop Store 1.0 - Remote Code Execution (RCE)
webapps php CVE-2023-1826

Ahmet Ümit BAYRAM BrainyCP V1.0 - Remote Code Execution
webapps php

Zer0FauLT Roxy Fileman 1.4.5 - Arbitrary File Upload
webapps ashx

nu11secur1ty ever gauzy v0.281.9 - JWT weak HMAC secret
webapps typescript

Mirabbas Ağalarov dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated)
webapps php

dwbzn Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)
webapps jsp CVE-2022-43939;CVE-2022-43769

Mirabbas Ağalarov WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
webapps php

Abdulaziz Saad ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS)
webapps cgi CVE-2023-26692

Betul Denizler X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2022-48177

Betul Denizler X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2022-48178

nu11secur1ty Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE)
webapps php

omurugur Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS)
webapps multiple CVE-2022-0020

omurugur Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS)
webapps multiple CVE-2022-25630