Ron Jost Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)
webapps php CVE-2020-35948

Salman Asad Online Voting System 1.0 - Remote Code Execution (Authenticated)
webapps php

Salman Asad Online Voting System 1.0 - Authentication Bypass (SQLi)
webapps php

Murat DEMİRCİ Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass)
webapps php

Barış Yıldızoğlu Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
webapps multiple

Dolev Farhi Apache Superset 1.1.0 - Time-Based Account Enumeration
webapps multiple

Alejandro Perez phpAbook 0.9i - SQL Injection
webapps php

Nehal Zaman ES File Explorer 4.1.9.7.4 - Arbitrary File Read
remote android CVE-2019-6447

Bryan Leong Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
webapps hardware

Captain_hook Atlassian Jira Server Data Center 8.16.0 - Reflected Cross-Site Scripting (XSS)
webapps macos CVE-2021-26078

Toby Jackson WordPress Plugin YOP Polls 6.2.7 - Stored Cross Site Scripting (XSS)
webapps php

Maide Ilkay Aydogdu Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
webapps php

Barış Yıldızoğlu Simple Client Management System 1.0 - 'uemail' SQL Injection (Unauthenticated)
webapps php

Bryan Leong Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated)
webapps php CVE-2019-12744

Brian Rodriguez SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
local windows

Koh You Liang TP-Link TL-WR841N - Command Injection
webapps hardware CVE-2020-35576