WP Publications WordPress Plugin 1.2 - Stored XSS

White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI)

MikroTik RouterOS 7.19.1 - Reflected XSS

SugarCRM 14.0.0 - SSRF/Code Injection

Langflow 1.2.x - Remote Code Execution (RCE)

TOTOLINK N300RB 8.54 - Command Execution

PivotX 3.0.0 RC3 - Remote Code Execution (RCE)

Discourse 3.2.x - Anonymous Cache Poisoning

Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover

Microsoft Defender for Endpoint (MDE) - Elevation of Privilege

ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)

Moodle 4.4.0 - Authenticated Remote Code Execution

gogs 0.13.0 - Remote Code Execution (RCE)

Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)

Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE)

McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information