nu11secur1ty Bus Reservation System 1.1 - Multiple-SQLi
webapps php

psychoSherlock WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)
webapps php CVE-2022-25148

nu11secur1ty Member Login Script 3.3 - Client-side desync
webapps php

tahaafarooq DLINK DPH-400SE - Exposure of Sensitive Information
webapps hardware

Bryce Raindayzz Harty FileMage Gateway 1.10.9 - Local File Inclusion
webapps multiple CVE-2023-39026

Anish Feroz Kingo ROOT 1.5.8 - Unquoted Service Path
local windows

Waqas Ahmed Faroouqi Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
local windows

kv1to AdminLTE PiHole 5.18 - Broken Access Control
webapps php CVE-2022-23513

Daniel González CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
webapps php

Daniel González CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
webapps php

CraCkEr Academy LMS 6.1 - Arbitrary File Upload
webapps php

CraCkEr Credit Lite 1.5.4 - SQL Injection
webapps php CVE-2023-4407

Ahmet Ümit BAYRAM NVClient v5.0 - Stack Buffer Overflow (DoS)
local windows

Robel Campbell Ivanti Avalanche <v6.4.0.0 - Remote Code Execution
remote windows CVE-2023-32560

CraCkEr Hyip Rio 2.1 - Arbitrary File Upload
webapps php CVE-2023-4382

Ehlullah Albayrak Blood Donor Management System v1.0 - Stored XSS
webapps php