enox Gitlab 13.9.3 - Remote Code Execution (Authenticated)
webapps ruby

Piyush Patil FUDForum 3.1.0 - 'author' Reflected XSS
webapps php CVE-2021-27520

Piyush Patil FUDForum 3.1.0 - 'srch' Reflected XSS
webapps php CVE-2021-27519

sirpedrotavares CHIYU IoT Devices - Denial of Service (DoS)
webapps hardware CVE-2021-31642

Piyush Patil Seo Panel 4.8.0 - 'from_time' Reflected XSS
webapps php CVE-2021-28420

flast101 PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution
webapps php

Piyush Patil Seo Panel 4.8.0 - 'category' Reflected XSS
webapps php CVE-2021-28418

Piyush Patil Seo Panel 4.8.0 - 'search_name' Reflected XSS
webapps php CVE-2021-28417

Piyush Patil Products.PluggableAuthService 2.6.0 - Open Redirect
webapps python CVE-2021-21337

Ron Jost GetSimple CMS 3.3.4 - Information Disclosure
webapps php CVE-2014-8722

Pepe Berba Apache Airflow 1.10.10 - 'Example Dag' Remote Code Execution
webapps multiple CVE-2020-13927;CVE-2020-11978

Metin Yunus Kandemir Thecus N4800Eco Nas Server Control Panel - Comand Injection
webapps hardware

Mohammed Aloraimi Atlassian Jira 8.15.0 - Information Disclosure (Username Enumeration)
webapps multiple

sirpedrotavares CHIYU TCP/IP Converter devices - CRLF injection
webapps cgi

sirpedrotavares CHIYU IoT devices - 'Multiple' Cross-Site Scripting (XSS)
webapps cgi

Bastijn Ouwendijk WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php