WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

Drupal Core 10.5.5 - Error-Based SQL Injection

WordPress OrderConvo 14 - Path Traversal

Notepad++ 8.9.6 - Arbitrary Code Execution

YAMCS yamcs-core 5.12.7 - No Rate Limiting

YAMCS yamcs-core 5.12.7 - User Enumeration

YAMCS yamcs-core 5.12.7 - LDAP Injection

Microsoft - NTLMv2 Hash Capture

MikroORM 7.0.13 - SQL Injection

Prodigy Commerce 3.3.0 - Local File Inclusion

Langflow 1.3.0 - Remote Code Execution

Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution

ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion

ZTE Routers - Unauthenticated Denial of Service

ZTE ZXHN H188A V6 - Authentication Bypass

ZTE H298A / H108N - Unauthenticated Credential Exposure

Linux Kernel - Local Privilege Escalation

MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution

Wing FTP Server 8.1.3 - Authenticated Remote Code Execution

CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)