phpIPAM 1.5.1 - SQL Injection

Piwigo 13.6.0 - SQL Injection

phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS)

phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)

Flowise 3.0.4 - Remote Code Execution (RCE)

Casdoor 2.95.0 - Cross-Site Request Forgery (CSRF)

Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)

Tourism Management System 2.0 - Arbitrary Shell Upload

dotCMS 25.07.02-1 - Authenticated Blind SQL Injection

ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection

XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

Concrete CMS 9.4.3 - Stored XSS

StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload

Lingdang CRM 8.6.4.7 - SQL Injection

Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure

Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)