Mücahit Saratar IPCop 2.1.9 - Remote Code Execution (RCE) (Authenticated)
webapps cgi

splint3rsec CMSuno 1.7 - 'tgo' Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2021-36654

Adrián Díaz ApacheOfBiz 17.12.01 - Remote Command Execution (RCE)
webapps java CVE-2020-9496

Leon Trappett qdPM 9.2 - Password Exposure (Unauthenticated)
webapps php

Leon Trappett qdPM 9.1 - Remote Code Execution (Authenticated)
webapps php CVE-2020-7246

Aryan Chehreghani WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
webapps php

Merbin Russel Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
webapps php

LiquidWorm Panasonic Sanyo CCTV Network Camera 2.03-0x - Cross-Site Request Forgery (Change Password)
webapps hardware

Christopher Ellis Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
remote java

J. Francisco Bolivar Oracle Fatwire 6.3 - Multiple Vulnerabilities
webapps multiple

niebardzo CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF)
webapps java CVE-2021-29995

securityforeveryone.com Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
webapps php

LiquidWorm IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
webapps aspx

LiquidWorm Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
webapps hardware

Sedric Louissaint TripSpark VEO Transportation - Blind SQL Injection
webapps windows

Javier Olmedo Event Registration System with QR Code 1.0 - Authentication Bypass
webapps php