| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  Online Appointment System V1.0 - Cross-Site Scripting (XSS)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Sanjay Singh										
				 | 
			
            	
			
				| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  ENTAB ERP 1.0 - Username PII leak
								 | 
								
					13			 | 
				
                     WEB
			   | 
								
												Deb Prasad Banerjee										
				 | 
			
            	
			
				| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  Joomla! v4.2.8 - Unauthenticated information disclosure
								 | 
								
					10			 | 
				
                     WEB
			   | 
								
												Alexandre ZANNI										
				 | 
			
            	
			
				| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  Restaurant Management System 1.0  - SQL Injection
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												calfcrusher										
				 | 
			
            	
			
				| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  Icinga Web 2.10 - Arbitrary File Disclosure
								 | 
								
					10			 | 
				
                     WEB
			   | 
								
												Jacob Ebben										
				 | 
			
            	
			
				| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  Adobe Connect 11.4.5 - Local File Disclosure
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												h4shur										
				 | 
			
            	
			
				| 
					2023-04-08	
				 | 
				
										 
				 | 
								
									  Altenergy Power Control Software C1.2.5 - OS command injection
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Ahmed Alroky										
				 | 
			
            	
			
				| 
					2023-04-07	
				 | 
				
										 
				 | 
								
									  Snitz Forum v1.0 - Blind SQL Injection
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Emiliano Febbi										
				 | 
			
            	
			
				| 
					2023-04-07	
				 | 
				
										 
				 | 
								
									  Rukovoditel 3.3.1 - Remote Code Execution (RCE)
								 | 
								
					5			 | 
				
                     WEB
			   | 
								
												Mirabbas Ağalarov										
				 | 
			
            	
			
				| 
					2023-04-07	
				 | 
				
										 
				 | 
								
									  ChurchCRM 4.5.1 - Authenticated SQL Injection
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Arvandy										
				 | 
			
            	
			
				| 
					2023-04-07	
				 | 
				
										 
				 | 
								
									  NotrinosERP 0.7 - Authenticated Blind SQL Injection
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Arvandy										
				 | 
			
            	
			
				| 
					2023-04-07	
				 | 
				
										 
				 | 
								
									  MAC 1200R - Directory Traversal
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Chunlei Shang_ Jiangsu Public Information Co._ Ltd										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  craftercms 4.x.x - CORS
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Purchase Order Management-1.0 - Local File Inclusion
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Kahvi-0										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Agilebio Lab Collector Electronic Lab Notebook  v4.234 - Remote Code Execution (RCE)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Anthony Cole										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  ChurchCRM v4.5.3-121fcc1 - SQL Injection
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  flatnux 2021-03.25 - Remote Code Execution (Authenticated)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Ömer Hasan Durmuş										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Simple Food Ordering System v1.0 - Cross-Site Scripting (XSS)
								 | 
								
					11			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Music Gallery Site v1.0 - SQL Injection on page Master.php
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Music Gallery Site v1.0 - SQL Injection on page view_music_details.php
								 | 
								
					5			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Music Gallery Site v1.0 - Broken Access Control
								 | 
								
					4			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Music Gallery Site v1.0 - SQL Injection on  music_list.php
								 | 
								
					5			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Employee Task Management System v1.0 - SQL Injection on edit-task.php
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Employee Task Management System v1.0 - SQL Injection on (task-details.php?task_id=?)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Employee Task Management System v1.0 - Broken Authentication
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Auto Dealer Management System v1.0 - SQL Injection on manage_user.php
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Auto Dealer Management System v1.0 - SQL Injection in sell_vehicle.php
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Auto Dealer Management System v1.0 - SQL Injection
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Auto Dealer Management System 1.0 - Broken Access Control Exploit
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Ahmed Ismail										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Best pos Management System v1.0 - SQL Injection
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Ahmed Ismail										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Kimai-1.30.10 - SameSite Cookie-Vulnerability session hijacking
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  POLR URL 2.3.0 - Shortener Admin Takeover
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												p4kl0nc4t										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  modoboa  2.0.4 - Admin TakeOver
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												7h3h4ckv157										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  LDAP Tool Box Self Service Password v1.5.2 -  Account takeover
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Tahar BENNACEF										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Intern Record System v1.0 - SQL Injection (Unauthenticated)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Hamdi Sevben										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Simple Task Managing System v1.0 - SQL Injection (Unauthenticated)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Hamdi Sevben										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Art Gallery Management System Project in PHP v 1.0 - SQL injection
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Yogesh Verma										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  atrocore 1.5.25 User interaction - Unauthenticated File upload - RCE
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-06	
				 | 
				
										 
				 | 
								
									  Dompdf 1.2.1 - Remote Code Execution (RCE)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Ravindu Wickramasinghe										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Provide Server v.14.4 XSS - CSRF & Remote Code Execution (RCE)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Andreas Finstad										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Froxlor 2.0.3 Stable - Remote Code Execution (RCE)
								 | 
								
					11			 | 
				
                     WEB
			   | 
								
												Askar										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  CKEditor 5 35.4.0 - Cross-Site Scripting (XSS)
								 | 
								
					13			 | 
				
                     WEB
			   | 
								
												Manish Pathak										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Answerdev 1.0.3 - Account Takeover
								 | 
								
					32			 | 
				
                     WEB
			   | 
								
												Eduardo Pérez-Malumbres Cervera										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  ERPNext 12.29 - Cross-Site Scripting (XSS)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Patrick Dean Ramos / Nathu Nandwani / Junnair Manl										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  BTCPay Server v1.7.4 - HTML Injection
								 | 
								
					10			 | 
				
                     WEB
			   | 
								
												Manojkumar J										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  itech TrainSmart r1044 - SQL injection
								 | 
								
					11			 | 
				
                     WEB
			   | 
								
												Adrian Bondocea										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Responsive FileManager 9.9.5 - Remote Code Execution (RCE)
								 | 
								
					11			 | 
				
                     WEB
			   | 
								
												Galoget Latorre										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Control Web Panel 7 (CWP7) v0.9.8.1147 -  Remote Code Execution (RCE)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Mayank Deshmukh										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Online Eyewear Shop 1.0 - SQL Injection (Unauthenticated)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Muhammad Navaid Zafar Ansari										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  bgERP v22.31 (Orlovets) - Cookie Session vulnerability & Cross-Site Scripting (XSS)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Liferay Portal 6.2.5 - Insecure Permissions
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Fu2x2000										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Bus Pass Management System 1.0  - Stored Cross-Site Scripting (XSS)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Matteo Conti										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Calendar Event Multi View  1.4.07 - Unauthenticated Arbitrary Event Creation to Cross-Site Scripting
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Mostafa Farzaneh										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  zstore 6.6.0 - Cross-Site Scripting (XSS)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  projectSend r1605 - Remote Code Exectution RCE
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Mirabbas Ağalarov										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												RedTeam Pentesting GmbH										
				 | 
			
            	
			
				| 
					2023-04-05	
				 | 
				
										 
				 | 
								
									  PhotoShow 3.0 - Remote Code Execution
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												LSCP Responsible Disclosure Lab										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Paid Memberships Pro  v2.9.8 (WordPress Plugin) - Unauthenticated SQL Injection
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												r3nt0n										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  GLPI  Cartography Plugin v6.0.0 - Unauthenticated Remote Code Execution (RCE)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  GLPI v10.0.2 - SQL Injection (Authentication Depends on Configuration)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  GLPI Activity  v3.1.0 - Authenticated Local File Inclusion on Activity plugin
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  GLPI Glpiinventory v1.0.1 - Unauthenticated Local File Inclusion
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  GLPI 4.0.2 - Unauthenticated Local File Inclusion on Manageentities plugin
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Roxy WI v6.1.1.0 - Unauthenticated Remote Code Execution (RCE) via ssl_cert Upload
								 | 
								
					5			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Roxy WI v6.1.0.0 - Improper Authentication Control
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Nuri Çilengir										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE
								 | 
								
					11			 | 
				
                     WEB
			   | 
								
												BLY										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  ManageEngin AMP 4.3.0 - File-path-traversal
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting (XSS)
								 | 
								
					5			 | 
				
                     WEB
			   | 
								
												Sajibe Kanti										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  ERPGo SaaS 3.9 - CSV Injection
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Sajibe Kanti										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  AmazCart CMS 3.4 - Cross-Site-Scripting (XSS)
								 | 
								
					11			 | 
				
                     WEB
			   | 
								
												Sajibe Kanti										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  SQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												geeklinuxman										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Art Gallery Management System Project v1.0 - SQL Injection (editid) authenticated
								 | 
								
					24			 | 
				
                     WEB
			   | 
								
												Rahul Patwari										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Art Gallery Management System Project v1.0 - SQL Injection (cid) Unauthenticated
								 | 
								
					4			 | 
				
                     WEB
			   | 
								
												Rahul Patwari										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Art Gallery Management System Project v1.0 - Reflected Cross-Site Scripting (XSS)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Rahul Patwari										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  MyBB 1.8.32 - Remote Code Execution (RCE) (Authenticated)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												lUc1f3r11										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  SLIMSV 9.5.2 - Cross-Site Scripting (XSS)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)
								 | 
								
					26			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Nacos 2.0.3 - Access Control vulnerability
								 | 
								
					10			 | 
				
                     WEB
			   | 
								
												Jenson Zhao										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Mohammed Chemouri										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  ChiKoi v1.0 - SQL Injection
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-03	
				 | 
				
										 
				 | 
								
									  pimCore v5.4.18-skeleton  - Sensitive Cookie with Improper SameSite Attribute
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  ELSI Smart Floor V3.3.3 - Stored Cross-Site Scripting (XSS)
								 | 
								
					4			 | 
				
                     WEB
			   | 
								
												Rob_ CTRL Group										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												SITE Team										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  PMB 7.4.6 - SQL Injection
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												str0xo DZ										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution (RCE)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												numan türle										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  Apache 2.4.x - Buffer Overflow
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Sunil Iyengar										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Mohammed A.Siledar										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  SugarCRM 12.2.0 - Remote Code Execution (RCE)
								 | 
								
					10			 | 
				
                     WEB
			   | 
								
												sw33t.0day										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  perfSONAR v4.4.5 - Partial Blind CSRF
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Ryan Moore										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  Prizm Content Connect v10.5.1030.8315 - XXE
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												xhzeem										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  XCMS v1.83 - Remote Command Execution (RCE)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Onurcan										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Antonio Francesco Sardella										
				 | 
			
            	
			
				| 
					2023-04-01	
				 | 
				
										 
				 | 
								
									  GeoVision Camera GV-ADR2701 - Authentication Bypass
								 | 
								
					10			 | 
				
                     WEB
			   | 
								
												Chan Nyein Wai										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Textpattern 4.8.8 - Remote Code Execution (RCE) (Authenticated)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Alperen Ergel										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Bangresto 1.0 - SQL Injection
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Cacti v1.2.22 - Remote Command Execution (RCE)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Riadh Bouchahoua										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Judging Management System v1.0 - Authentication Bypass
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Angelo Pio Amirante										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Judging Management System v1.0 - Remote Code Execution (RCE)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Angelo Pio Amirante										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  rconfig 3.9.7 - Sql Injection (Authenticated)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												azhen										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Spitfire CMS 1.0.475 - PHP Object Injection
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												LiquidWorm										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Senayan Library Management System v9.0.0 - SQL Injection
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  Bludit 3-14-1 Plugin 'UploadPlugin' - Remote Code Execution (RCE) (Authenticated)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Alperen Ergel										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  WooCommerce v7.1.0 - Remote Code Execution(RCE)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Milad karimi										
				 | 
			
            	
			
				| 
					2023-03-31	
				 | 
				
										 
				 | 
								
									  EQ Enterprise management system v2.2.0 - SQL Injection
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												TLF										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Eve-ng 5.0.1-13 - Stored Cross-Site Scripting (XSS)
								 | 
								
					18			 | 
				
                     WEB
			   | 
								
												@casp3r0x0 hassan ali al-khafaji										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  WPForms 1.7.8 - Cross-Site Scripting (XSS)
								 | 
								
					19			 | 
				
                     WEB
			   | 
								
												Milad karimi										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Shoplazza 1.1 - Stored Cross-Site Scripting (XSS)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Andrey Stoykov										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  LISTSERV 17 - Insecure Direct Object Reference (IDOR)
								 | 
								
					8			 | 
				
                     WEB
			   | 
								
												Shaunt Der-Grigorian										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  LISTSERV 17 - Reflected Cross Site Scripting (XSS)
								 | 
								
					12			 | 
				
                     WEB
			   | 
								
												Shaunt Der-Grigorian										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  4images 1.9 - Remote Command Execution (RCE)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Andrey Stoykov										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)
								 | 
								
					4			 | 
				
                     WEB
			   | 
								
												Eric Flokstra										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Concrete5 CME v9.1.3 - Xpath injection
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Virtual Reception v1.0 - Web Server Directory Traversal
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Spinae										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Covenant v0.5 - Remote Code Execution (RCE)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												xThaz										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Ecommerse v1.0 - Cross-Site Scripting (XSS)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Boa Web Server v0.94.14 - Authentication Bypass
								 | 
								
					14			 | 
				
                     WEB
			   | 
								
												George Tsimpidas										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  myBB forums 1.8.26 - Stored Cross-Site Scripting (XSS)
								 | 
								
					9			 | 
				
                     WEB
			   | 
								
												Andrey Stoykov										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  ClicShopping v3.402 - Cross-Site Scripting (XSS)
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												nu11secur1ty										
				 | 
			
            	
			
				| 
					2023-03-30	
				 | 
				
										 
				 | 
								
									  Dreamer CMS v4.0.0 - SQL Injection
								 | 
								
					5			 | 
				
                     WEB
			   | 
								
												lvren										
				 | 
			
            	
			
				| 
					2023-03-29	
				 | 
				
										 
				 | 
								
									  Revenue Collection System v1.0 - Remote Code Execution (RCE)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Joe Pollock										
				 | 
			
            	
			
				| 
					2023-03-29	
				 | 
				
										 
				 | 
								
									  Helmet Store Showroom v1.0 - SQL Injection
								 | 
								
					7			 | 
				
                     WEB
			   | 
								
												Ameer Hamza										
				 | 
			
            	
			
				| 
					2023-03-29	
				 | 
				
										 
				 | 
								
									  Uniview NVR301-04S2-P4 - Reflected Cross-Site Scripting (XSS)
								 | 
								
					6			 | 
				
                     WEB
			   | 
								
												Bleron Rrustemi										
				 |