LiquidWorm Sielco Analog FM Transmitter 2.12 - 'id' Cookie Brute Force Session Hijacking
webapps hardware

Zer0FauLT InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal
webapps asp

LiquidWorm Google Chrome Browser 111.0.5563.64 - AXPlatformNodeCocoa Fatal OOM/Crash (macOS)
local macos

nu11secur1ty Bludit 4.0.0-rc-2 - Account takeover
webapps php

nu11secur1ty Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 - Spoofing
local multiple CVE-2023-24892

Ahmet Ümit BAYRAM BrainyCP V1.0 - Remote Code Execution
webapps php

Giorgi Dograshvili Paradox Security Systems IPR512 - Denial Of Service
dos hardware CVE-2023-24709

Zer0FauLT Roxy Fileman 1.4.5 - Arbitrary File Upload
webapps ashx

nu11secur1ty ever gauzy v0.281.9 - JWT weak HMAC secret
webapps typescript

Mirabbas Ağalarov dotclear 2.25.3 - Remote Code Execution (RCE) (Authenticated)
webapps php

Milad karimi ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path
local windows

Mirabbas Ağalarov WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)
webapps php

Betul Denizler X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2022-48177

Betul Denizler X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2022-48178

nu11secur1ty Online-Pizza-Ordering -1.0 - Remote Code Execution (RCE)
webapps php

omurugur Palo Alto Cortex XSOAR 6.5.0 - Stored Cross-Site Scripting (XSS)
webapps multiple CVE-2022-0020