Thurein Soe Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
remote hardware CVE-2022-28171

Anish Feroz TP-Link TL-WR740N - Authenticated Directory Transversal
webapps hardware

Mirabbas Ağalarov Blackcat Cms v1.4 - Remote Code Execution (RCE)
webapps php

Mirabbas Ağalarov Blackcat Cms v1.4 - Stored XSS
webapps php

Paul Smith ABB FlowX v4.00 - Exposure of Sensitive Information
webapps hardware CVE-2023-1258

nu11secur1ty Statamic 4.7.0 - File-Inclusion
webapps php

Mirabbas Ağalarov CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
webapps php

Mirabbas Ağalarov CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
webapps php

Mirabbas Ağalarov CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
webapps php

1337kid Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
webapps php CVE-2023-37629

Mirabbas Ağalarov Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
webapps php

nu11secur1ty Vaidya-Mitra 1.0 - Multiple SQLi
webapps php

qw3rTyTy Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
webapps php

thoughtfault phpfm v1.7.9 - Authentication type juggling
webapps php

thoughtfault PimpMyLog v1.7.14 - Improper access control
webapps php

Mirabbas Ağalarov Pluck v4.7.18 - Remote Code Execution (RCE)
webapps php