rootabeta PortableKanban 4.3.6578.38136 - Encrypted Password Retrieval
local windows

Mahendra Purbia OpenCart 3.0.36 - ATO via Cross Site Request Forgery
webapps php

Swapnil Subhash Bodekar WordPress Plugin Custom Global Variables 1.0.5 - 'name' Stored Cross-Site Scripting (XSS)
webapps php

Audencia Business SCHOOL Red Team EyesOfNetwork 5.3 - LFI
webapps multiple

Ramazan Mert GÖKTEN Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting
webapps multiple

Audencia Business SCHOOL Red Team EyesOfNetwork 5.3 - RCE & PrivEsc
webapps multiple

SunCSR Team Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit)
webapps php

SunCSR Team WordPress Plugin Autoptimize 2.7.6 - Authenticated Arbitrary File Upload (Metasploit)
webapps php

SunCSR Team Apache Flink 1.11.0 - Unauthenticated Arbitrary File Read (Metasploit)
webapps java CVE-2020-17519

Metin Yunus Kandemir Cockpit Version 234 - Server-Side Request Forgery (Unauthenticated)
webapps multiple

Arnav Tripathy Life Insurance Management System 1.0 - Multiple Stored XSS
webapps php

Arnav Tripathy CRUD Operation 1.0 - Multiple Stored XSS
webapps php

Arnav Tripathy Curfew e-Pass Management System 1.0 - Stored XSS
webapps php

Rafael Resende Cockpit CMS 0.6.1 - Remote Code Execution
webapps php

Arnav Tripathy Resumes Management and Job Application Website 1.0 - RCE (Unauthenticated)
webapps php

Mohammed Alshehri WinAVR Version 20100110 - Insecure Folder Permissions
local windows