Microsoft Exchange Active Directory Topology version 15.0.847.40 suffers from an unquoted service path vulnerability.

Fuel CMS version 1.5.0 suffers from a cross site request forgery vulnerability.

Zyxel NWA-1100-NH suffers from a command injection vulnerability.

Scriptcase version 9.7 suffers from a remote shell upload vulnerability.

PTPublisher version 2.3.4 suffers from an unquoted service path vulnerability.

EaseUS Data Recovery version 15.1.0.0 suffers from an unquoted service path vulnerability.

HackTool.Win32.Delf.vs malware suffers from an insecure credential storage vulnerability.

WordPress Elementor versions 3.6.0, 3.6.1, and 3.6.2 suffer from a remote shell upload vulnerability.

Backdoor.Win32.Loselove malware suffers from a denial of service vulnerability.

WordPress Videos Sync PDF plugin version 1.7.4 suffers from a persistent cross site scripting vulnerability.