Neurogenesia ECOA Building Automation System - Directory Traversal Content Disclosure
webapps hardware

Neurogenesia ECOA Building Automation System - Path Traversal Arbitrary File Upload
webapps hardware

Neurogenesia ECOA Building Automation System - Weak Default Credentials
webapps hardware

Aryan Chehreghani Men Salon Management System 1.0 - Multiple Vulnerabilities
webapps php

Emre Aslan Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
webapps php

Nikhil Kapoor WordPress Plugin TablePress 1.14 - CSV Injection
webapps php

Mohin Paramasivam WordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2)
webapps php

Nikhil Kapoor WordPress Plugin WP Sitemap Page 1.6.4 - Stored Cross-Site Scripting (XSS)
webapps php

Vulnz Antminer Monitor 0.5.0 - Authentication Bypass
webapps multiple

a-rey Patient Appointment Scheduler System 1.0 - Persistent Cross-Site Scripting
webapps php

a-rey Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload
webapps php

sudoninja Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR)
webapps php

Mason Soroka-Gill FlatCore CMS 2.0.7 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-39608

Allen Enosh Upputori OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference (IDOR)
webapps php CVE-2021-40352

Eric Salario OpenSIS 8.0 'modname' - Directory Traversal
webapps php CVE-2021-40651

Nikhil Kapoor WordPress Plugin Duplicate Page 4.4.1 - Stored Cross-Site Scripting (XSS)
webapps php