- A vulnerability in Siemens' Industrial Edge Management Pro and other products allows an unauthenticated remote attacker to execute arbitrary code due to improper validation of device tokens. - A deserialization issue in Kibana can lead to arbitrary code execution when parsing a YAML document containing a crafted payload. - A vulnerability in Microsoft's Windows 10 version 1507 allows an attacker to exploit previously mitigated vulnerabilities affecting Optional Components. - A command injection vulnerability in D-Link DI-8300 firmware allows an attacker to execute arbitrary commands via the upgrade_filter_asp function. - A command injection vulnerability in D-Link DI-8300 firmware allows an attacker to execute arbitrary commands via the msp_info_htm function. - A command injection vulnerability in COMFAST CF-XR11 firmware allows an attacker to execute arbitrary commands via the sub_424CB4 function. - A SQL injection vulnerability in evilnapsis Inventio Lite allows an attacker to execute arbitrary SQL code via the username parameter. - A server-side request forgery vulnerability in SeaCMS v13.1 allows an attacker to execute arbitrary code via the url parameter at /admin_reslib.php. - A remote code execution vulnerability in Qualitor up to 8.24 allows an attacker to upload arbitrary files via a crafted GET request. - A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows an attacker to execute arbitrary code.