VulnCheck

Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter

WACRM Authorization Bypass via Automation Engine Endpoint

AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie

OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source

OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint

QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager

OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint