Tyler Butler AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)
webapps hardware CVE-2021-35956

Audencia Business SCHOOL Red Team Vianeos OctoPUS 5 - 'login_user' SQLi
webapps multiple

Ron Jost Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)
webapps php CVE-2020-35948

Murat DEMİRCİ Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass)
webapps php

Barış Yıldızoğlu Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
webapps multiple

Dolev Farhi Apache Superset 1.1.0 - Time-Based Account Enumeration
webapps multiple

Alejandro Perez phpAbook 0.9i - SQL Injection
webapps php

Bryan Leong Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
webapps hardware

Barış Yıldızoğlu Simple Client Management System 1.0 - 'uemail' SQL Injection (Unauthenticated)
webapps php

Bryan Leong Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated)
webapps php CVE-2019-12744

Brian Rodriguez SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
local windows

Pergyz Adobe ColdFusion 8 - Remote Command Execution (RCE)
webapps cfm CVE-2009-2265

Rinku Kumar Simple CRM 3.0 - 'email' SQL injection (Authentication Bypass)
webapps php

Berk Can Geyikci Online Library Management System 1.0 - Arbitrary File Upload Remote Code Execution (Unauthenticated)
webapps php

Berk Can Geyikci Online Library Management System 1.0 - 'Search' SQL Injection
webapps php

Pratik Khalane Phone Shop Sales Managements System 1.0 - Insecure Direct Object Reference (IDOR)
webapps php