Flowise 3.0.4 - Remote Code Execution (RCE)

Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)

Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)

Tourism Management System 2.0 - Arbitrary Shell Upload

dotCMS 25.07.02-1 - Authenticated Blind SQL Injection

ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection

XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

Concrete CMS 9.4.3 - Stored XSS

StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload

Lingdang CRM 8.6.4.7 - SQL Injection

Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure

Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)

Soosyze CMS 2.0 - Brute Force Login

RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)

BigAnt Office Messenger 5.6.06 - SQL Injection

JetBrains TeamCity 2023.11.4 - Authentication Bypass