d7x Linux/x86 - Reverse (dynamic IP and port/TCP) Shell (/bin/sh) Shellcode (86 bytes)
linux_x86

d7x Linux/x86 - Bind (User Specified Port) Shell (/bin/sh) Shellcode (102 bytes)
linux_x86

Luca Bernardi Garbage Collection Management System 1.0 - SQL Injection + Arbitrary File Upload
webapps php

Alexandre ZANNI OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated) (2)
webapps php CVE-2018-15139

Subhadip Nag Invoice System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
webapps php

Swapnil Subhash Bodekar WordPress Plugin WPFront Notification Bar 1.9.1.04012 - Stored Cross-Site Scripting (XSS)
webapps php

Central InfoSec Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS)
webapps multiple CVE-2019-0221

Central InfoSec Apache Tomcat 9.0.0.M1 - Open Redirect
webapps multiple CVE-2018-11784

Subhadip Nag Zoo Management System 1.0 - 'Multiple' Persistent Cross-Site-Scripting (XSS)
webapps php

Eleonora Guardini Church Management System 1.0 - SQL Injection (Authentication Bypass) + Arbitrary File Upload + RCE
webapps php

Ron Jost Wordpress Plugin SP Project & Document Manager 4.21 - Remote Code Execution (RCE) (Authenticated)
webapps php

faisalfs10x Online Covid Vaccination Scheduler System 1.0 - Arbitrary File Upload to Remote Code Execution (Unauthenticated)
webapps php

Patrik Lantz Wyomind Help Desk 1.3.6 - Remote Code Execution (RCE)
webapps multiple

Subhadip Nag Employee Record Management System 1.2 - Stored Cross-Site Scripting (XSS)
webapps php

Davide \'yth1n\' Bianchin Exam Hall Management System 1.0 - Unrestricted File Upload + RCE (Unauthenticated)
webapps php

Beren Kuday GÖRÜN WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)
webapps php CVE-2018-15877