yozgatalperen1 GYM MS - GYM Management System - Cross Site Scripting (Stored)
webapps php

Cory Cline_ Gabe Rust Proxmox VE - TOTP Brute Force
remote linux

AmirZargham Axigen < 10.3.3.47_ 10.2.3.12 - Reflected XSS
webapps multiple CVE-2022-31470

M. Akil Gündoğan GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
remote windows

Miguel Santareno Wordpress Plugin Elementor 3.5.5 - Iframe Injection
webapps php CVE-2022-4953

Daniel González CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
webapps php

Daniel González CSZ CMS 1.3.0 - Stored Cross-Site Scripting ('Photo URL' and 'YouTube URL' )
webapps php

Ashutosh Singh Umath User Registration & Login and User Management System v3.0 - SQL Injection (Unauthenticated)
webapps php

Ashutosh Singh Umath User Registration & Login and User Management System v3.0 - Stored Cross-Site Scripting (XSS)
webapps php

Voyag3r TP-Link Archer AX21 - Unauthenticated Command Injection
remote hardware CVE-2023-1389

Yehia Elghaly Lucee 5.4.2.17 - Authenticated Reflected XSS
webapps multiple

Yehia Elghaly Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' (DOS)
dos windows

Miguel Santareno Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR
webapps php CVE-2023-3219

Miguel Santareno Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Event Access
webapps php CVE-2023-2796

RedTeam Pentesting GmbH RWS WorldServer 11.7.3 - Session Token Enumeration
webapps multiple CVE-2023-38357

Andre Nogueira RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)
local windows