Vikas Srivastava WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)
webapps php

r0ny ElasticSearch 7.13.3 - Memory disclosure
webapps multiple CVE-2021-22145

faisalfs10x CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
webapps php

LiquidWorm KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
webapps hardware

LiquidWorm KevinLAB BEMS 1.0 - Authentication Bypass
webapps hardware

LiquidWorm KevinLAB BEMS 1.0 - Undocumented Backdoor Account
remote hardware

Mesh3l_911 Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)
webapps linux CVE-2021-31761

Aakash Choudhary WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)
webapps php

faisalfs10x PEEL Shopping 9.3.0 - 'id' Time-based SQL Injection
webapps php CVE-2021-37593

Vikas Srivastava WordPress Plugin Mimetic Books 0.2.13 - 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)
webapps php

nhattruong WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation
webapps php

nhattruong WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)
webapps php CVE-2020-6010

Gr33nh4t Aruba Instant 8.7.1.0 - Arbitrary File Modification
remote hardware CVE-2021-25155

Metin Yunus Kandemir Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection
webapps hardware

Photubias ForgeRock Access Manager 14.6.3 - Remote Code Execution (RCE) (Unauthenticated)
webapps java CVE-2021-35464

Salman Asad Argus Surveillance DVR 4.0 - Weak Password Encryption
local windows