Furkan Gedik Online Shopping System Advanced - Sql Injection
webapps php

Jonas Benjamin Friedli SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration
webapps multiple CVE-2023-3897

Furkan ÖZER Advanced Page Visit Counter 1.0 - Admin+ Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php

Andreas Finstad WhatsUp Gold 2022 (22.1.0 Build 39) - XSS
webapps multiple

Syed Affan Ahmed (ZEROXINN) TP-Link TL-WR740N - UnAuthenticated Directory Transversal
webapps hardware

Waqas Ahmed Faroouqi PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow
remote windows

Syed Affan Ahmed (ZEROXINN) GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities
webapps multiple

Kai Feng OpenPLC WebServer 3 - Denial of Service
dos multiple

Antonio Francesco Sardella Cacti 1.2.24 - Authenticated command injection when using SNMP options
webapps php CVE-2023-39362

Furkan Karaarslan Wordpress Sonaar Music Plugin 4.7 - Stored XSS
webapps php

Florent MONTEL Media Library Assistant Wordpress Plugin - RCE and LFI
webapps php CVE-2023-4634

Revan Arifio Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation
webapps php CVE-2023-4278

Riyan Firmansyah of Seclab Ruijie Reyee Mesh Router - MITM Remote Code Execution (RCE)
remote hardware

mohamed youssef SyncBreeze 15.2.24 - 'login' Denial of Service
dos windows

tahaafarooq DLINK DPH-400SE - Exposure of Sensitive Information
webapps hardware

Anish Feroz Kingo ROOT 1.5.8 - Unquoted Service Path
local windows