nu11secur1ty Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS)
webapps multiple

Alejandra Sánchez ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
local windows

Rohit Burke COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)
webapps php

Rohit Burke COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass)
webapps php

Metin Yunus Kandemir ManageEngine ADSelfService Plus 6.1 - CSV Injection
webapps multiple

Luis Martínez WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
dos ios

H.H.A.Ravindu Priyankara Visual Studio Code 1.47.1 - Denial of Service (PoC)
local windows

Dimitrios Mitakos EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection
webapps php

Fellipe Oliveira Subrion CMS 4.2.1 - Arbitrary File Upload
webapps php CVE-2018-19422

Abdulkadir AYDOGAN Advanced Guestbook 2.4.4 - 'Smilies' Persistent Cross-Site Scripting (XSS)
webapps php

Reza Afsahi Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery (Add Admin)
webapps php

Reza Afsahi Dental Clinic Appointment Reservation System 1.0 - 'Firstname' Persistent Cross Site Scripting (Authenticated)
webapps php

Mücahit Saratar IPFire 2.25 - Remote Code Execution (Authenticated)
webapps cgi CVE-2021-33393

M. Cory Billington Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)
webapps php CVE-2021-31933

Ayşenur KARAASLAN Podcast Generator 3.1 - 'Long Description' Persistent Cross-Site Scripting (XSS)
webapps php

Forrest Orr Firefox 72 IonMonkey - JIT Type Confusion
local windows_x86-64 CVE-2019-17026