VulnCheck

pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo

Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

MarketKing < 2.1.72 Missing Authorization via marketking_duplicate_product AJAX

Softaculous Virtualizor OS Command Injection via Billing Module Handler

MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX

MarketKing < 2.1.72 Missing Authorization via marketking_send_refund AJAX

RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter

Softaculous Virtualizor Authorization Bypass via Billing Module Handler