DLINK DAP-1620 A1 v1.01 – Directory Traversal

Akka HTTP 10.1.14 – Denial of Service

Explore CMS 1.0 – SQL Injection

Magento eCommerce CE v2.3.5-p2 – Blind SQLi

Navigate CMS 2.9.4 – Server-Side Request Forgery (SSRF) (Authenticated)

Bitrix24 – Remote Code Execution (RCE) (Authenticated)

WordPress Plugin stafflist 3.1.2 – SQLi (Authenticated)

Joomla Plugin SexyPolling 2.1.7 – SQLi

WordPress Plugin Blue Admin 21.06.01 – Cross-Site Request Forgery (CSRF)

Beehive Forum – Account Takeover