Haitam Lazaar

GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

GNU libextractor before 1.15 Stack Overflow via OLE2

GutenKit < 2.5.1 - Contributor+ Stored CSS Injection

Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger

Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR

Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR

Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint

Newsletters < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling

Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass

Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field