John Jefferson Li Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
webapps php

Forster Chiu i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
webapps php CVE-2021-41878

Mert Daş SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
local windows

Mert Daş TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
webapps php

Ramikan Sonicwall SonicOS 7.0 - Host Header Injection
webapps hardware CVE-2021-20031

Mert Daş Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
webapps multiple

Hüseyin Serkan Balkanli Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)
webapps php

Bekir Bugra TURKOGLU Simple Issue Tracker System 1.0 - SQLi Authentication Bypass
webapps php

Murat DEMİRCİ Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)
webapps php

LiquidWorm Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection
remote hardware

LiquidWorm Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)
remote hardware

Merve Oral Loan Management System 1.0 - SQLi Authentication Bypass
webapps php

Aryan Chehreghani Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)
local windows

Merve Oral Online Employees Work From Home Attendance System 1.0 - SQLi Authentication Bypass
webapps php

DreyAnd Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated)
webapps php CVE-2021-32172

Raven Security Associates django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)
webapps python CVE-2021-42053