numan türle VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS
webapps multiple

Fady Mohammed Osman VestaCP 0.9.8 - File Upload CSRF
webapps multiple CVE-2021-28379

securityforeveryone.com WoWonder Social Network Platform 3.1 - 'event_id' SQL Injection
webapps php

Christian Vierschilling Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection)
webapps php

Berkan Er SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload (Metasploit)
webapps multiple CVE-2021-27964

Berkan Er Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure
webapps multiple

Hosein Vita openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting
webapps multiple CVE-2021-27695

Murat ŞEKER rConfig 3.9.6 - 'path' Local File Inclusion (Authenticated)
webapps php

bl4ckh4ck5 MagpieRSS 0.72 - 'url' Command Injection
webapps php

Balaji Ayyasamy Zenario CMS 8.8.53370 - 'id' Blind SQL Injection
webapps php CVE-2021-26830

Richard Jones Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated)
webapps php

Richard Jones Monitoring System (Dashboard) 1.0 - 'uname' SQL Injection
webapps php

testanull Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
webapps windows CVE-2021-27065;CVE-2021-26855

xxcdd CouchCMS 2.2.1 - Persistent Cross-Site Scripting
webapps php

0xB9 MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting
webapps php

LiquidWorm NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation
webapps hardware