SugarCRM 14.0.0 - SSRF/Code Injection

Langflow 1.2.x - Remote Code Execution (RCE)

PivotX 3.0.0 RC3 - Remote Code Execution (RCE)

Discourse 3.2.x - Anonymous Cache Poisoning

Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover

Moodle 4.4.0 - Authenticated Remote Code Execution

Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE)

Sitecore 10.4 - Remote Code Execution (RCE)

Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)

Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI

PHP CGI Module 8.3.4 - Remote Code Execution (RCE)

Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation

Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)

Roundcube 1.6.10 - Remote Code Execution (RCE)

Laravel Pulse 1.3.1 - Arbitrary Code Injection

CloudClassroom PHP Project 1.0 - SQL Injection