Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell

Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege

ClipBucket 5.5.0 - Arbitrary File Upload

ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)

Tourism Management System 2.0 - Arbitrary Shell Upload

Casdoor 2.55.0 - Cross-Site Request Forgery (CSRF)

dotCMS 25.07.02-1 - Authenticated Blind SQL Injection

ELEX WooCommerce WordPress Plugin 1.4.3 - SQL Injection

XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

Concrete CMS 9.4.3 - Stored XSS

Mbed TLS 3.6.4 - Use-After-Free

HTTP/2 2.0 - Denial Of Service (DOS)

HTMLDOC 1.9.13 - Stack Buffer Overflow

GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)

GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure

StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload

Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass

Lingdang CRM 8.6.4.7 - SQL Injection

Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure

Tenda AC20 16.03.08.12 - Command Injection