nhattruong WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation
webapps php

nhattruong WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)
webapps php CVE-2020-6010

Metin Yunus Kandemir Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection
webapps hardware

Photubias ForgeRock Access Manager 14.6.3 - Remote Code Execution (RCE) (Unauthenticated)
webapps java CVE-2021-35464

Simone Cristofaro WordPress Plugin Popular Posts 5.3.2 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-42362

Bryan Leong osCommerce 2.3.4.1 - Remote Code Execution (2)
webapps php

Vikas Srivastava WordPress Plugin Current Book 1.0.1 - 'Book Title' Persistent Cross-Site Scripting
webapps php

Mesh3l_911 Webmin 1.973 - 'save_user.cgi' Cross-Site Request Forgery (CSRF)
webapps linux CVE-2021-31762

Luca Bernardi Garbage Collection Management System 1.0 - SQL Injection + Arbitrary File Upload
webapps php

Alexandre ZANNI OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated) (2)
webapps php CVE-2018-15139

Subhadip Nag Invoice System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
webapps php

Swapnil Subhash Bodekar WordPress Plugin WPFront Notification Bar 1.9.1.04012 - Stored Cross-Site Scripting (XSS)
webapps php

Central InfoSec Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS)
webapps multiple CVE-2019-0221

Central InfoSec Apache Tomcat 9.0.0.M1 - Open Redirect
webapps multiple CVE-2018-11784

Subhadip Nag Zoo Management System 1.0 - 'Multiple' Persistent Cross-Site-Scripting (XSS)
webapps php

Eleonora Guardini Church Management System 1.0 - SQL Injection (Authentication Bypass) + Arbitrary File Upload + RCE
webapps php