Fellipe Oliveira ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2)
webapps linux

Fellipe Oliveira ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1)
webapps windows

Radmil Gazizov Zabbix 3.4.7 - Stored XSS
webapps php

Filipe Oliveira SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow
webapps windows CVE-2017-15950

Jitendra Kumar Tripathi Budget Management System 1.0 - 'Budget title' Stored XSS
webapps php

Jitendra Kumar Tripathi Equipment Inventory System 1.0 - 'multiple' Stored XSS
webapps php

Quadron Research Lab Concrete5 8.5.4 - 'name' Stored XSS
webapps php CVE-2021-3111

Smriti Gaba TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated)
webapps hardware

George Tsimpidas Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting
webapps php

Andrea Gonzalez Dolibarr ERP 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE)
webapps php CVE-2020-14209

MiningOmerta Linksys EA7500 2.0.8.194281 - Cross-Site Scripting
webapps hardware CVE-2012-6708

Felipe Prates Donato Ovidentia 6 - 'id' SQL injection (Authenticated)
webapps php

Mohammed Alshehri Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path
local windows

Alan Mondragon Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
local windows

SamAlucard ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path
local windows

SamAlucard ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path
local windows