Path Traversal vulnerability (CVE-2024-11136) has been found in TCL Camera software.

Reflected XSS vulnerability (CVE-2024-7124) has been found in Poznan Supercomputing and Networking Center's DInGO dLibra software.

Privilege escalation vulnerability (CVE-2023-42133) has been found in PAX Android based POS terminals.

Resource Injection vulnerability (CVE-2024-6051) has been found in Vercom S.A. Redlink SDK.

2 new vulnerabilities (CVE-2024-6662 and CVE-2024-6880) have been found in MegaBIP software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2024-6449 and CVE-2024-6450) found in HyperView Geoportal Toolkit software.

Stored XSS vulnerability (CVE-2024-7269) has been found in ConnX ESP HR Management software.

Command Injection vulnerability (CVE-2024-3659) has been found in KAON AR2140 routers firmware.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2024-7265 to CVE-2024-7267) found in EZD RP software.

Cross-site Scripting vulnerability (CVE-2024-7127) has been found in Stackposts Social Marketing Tool software.