Tails versions 1.6 and below suffers from an information leak vulnerability via a symlink attack.

b374k web shell versions 2.8 and 3.2.3 suffer from a cross site request forgery vulnerability that allows for remote command injection.