Emir Polat Schlix CMS 2.2.6-6 - Arbitary File Upload (Authenticated)
webapps multiple

mekhalleh Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
webapps windows CVE-2021-26855

Mansoor R WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)
webapps php

nu11secur1ty Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS)
webapps multiple

Rohit Burke COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)
webapps php

Rohit Burke COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass)
webapps php

Metin Yunus Kandemir ManageEngine ADSelfService Plus 6.1 - CSV Injection
webapps multiple

Gulab Mondal In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection
webapps multiple CVE-2021-27828

Hosein Vita WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)
webapps php CVE-2021-24245

Gonzalo Villegas Microsoft Exchange 2019 - Unauthenticated Email Download
webapps windows CVE-2021-26855

Dimitrios Mitakos EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection
webapps php

bwnz Printable Staff ID Card Creator System 1.0 - 'email' SQL Injection
webapps php

Fellipe Oliveira Subrion CMS 4.2.1 - Arbitrary File Upload
webapps php CVE-2018-19422

Abdulkadir AYDOGAN Advanced Guestbook 2.4.4 - 'Smilies' Persistent Cross-Site Scripting (XSS)
webapps php

Mohammad Koochaki Billing Management System 2.0 - Union based SQL injection (Authenticated)
webapps php

Vani K G Simple Chatbot Application 1.0 - 'Category' Stored Cross site Scripting
webapps php