young pope WBCE 1.6.0 - Unauthenticated SQL injection
webapps php

Julio Ángel Ferrari Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter
webapps php

Joseph Kwabena Fiagbor Terratec dmx_6fire USB - Unquoted Service Path
local windows_x86-64 CVE-2024-31804

George Tsimpidas GUnet OpenEclass E-learning platform 3.15 - 'certbadge.php' Unrestricted File Upload
webapps php CVE-2024-31777

Ali Maharramli_Fikrat Guliev_Islam Rzayev Gibbon LMS v26.0.00 - SSTI vulnerability
webapps php CVE-2024-24724

Van Lam Nguyen Casdoor < v1.331.0 - '/api/set-password' CSRF
webapps go CVE-2023-34927

Gian Paris C. Agsam Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated)
webapps php

MURAT CAGRI ALIS Workout Journal App 1.0 - Stored XSS
webapps php

Subhankar Singh LimeSurvey Community 5.3.32 - Stored XSS
webapps php

Fernando Mengali minaliC 2.0.0 - Denied of Service
remote windows

Ali Maharramli_Fikrat Guliev_Islam Rzayev Gibbon LMS < v26.0.00 - Authenticated RCE
webapps php

Ravindu Wickramasinghe ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE
webapps php

Víctor García UPS Network Management Card 4 - Path Traversal
webapps php

Carlos Andres Gonzalez_ Matthew Gregory Nokia BMC Log Scanner - Remote Code Execution
webapps linux

Peter Gabaldon LaborOfficeFree 19.10 - MySQL Root Password Calculator
local windows

Dmitrii Ignatyev WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover
webapps php