Mohammad Koochaki Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS)
webapps php

Leon Trappett qdPM 9.2 - Password Exposure (Unauthenticated)
webapps php

Leon Trappett qdPM 9.1 - Remote Code Execution (Authenticated)
webapps php CVE-2020-7246

Aryan Chehreghani WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
webapps php

Merbin Russel Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
webapps php

LiquidWorm Panasonic Sanyo CCTV Network Camera 2.03-0x - Cross-Site Request Forgery (Change Password)
webapps hardware

Mohammad Koochaki Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
webapps php

Christopher Ellis Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
remote java

Akshay Khanna Men Salon Management System 1.0 - SQL Injection Authentication Bypass
webapps php

J. Francisco Bolivar Oracle Fatwire 6.3 - Multiple Vulnerabilities
webapps multiple

niebardzo CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF)
webapps java CVE-2021-29995

securityforeveryone.com Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
webapps php

LiquidWorm IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
webapps aspx

LiquidWorm Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
webapps hardware

Ivan Nikolsky Denver IP Camera SHO-110 - Unauthenticated Snapshot
webapps hardware

Sedric Louissaint TripSpark VEO Transportation - Blind SQL Injection
webapps windows