Zachary Asher Online Railway Reservation System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps php

Oscar Gil Gutierrez Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS)
webapps php

Jeremiasz Pluta Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)
remote python CVE-2021-43857

Daniel Monzón Vodafone H-500-s 3.5.10 - WiFi Password Disclosure
webapps hardware

Jeremiasz Pluta Online Admission System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps php

Luca Cuzzolin ConnectWise Control 19.2.24707 - Username Enumeration
remote multiple CVE-2019-16516

Enes Özeser Croogo 3.0.2 - 'Multiple' Stored Cross-Site Scripting (XSS)
webapps php

Enes Özeser Croogo 3.0.2 - Unrestricted File Upload
webapps php

kozmer Apache Log4j 2 - Remote Code Execution (RCE)
remote java CVE-2021-44228

leonjza Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)
local macos

leonjza Apache Log4j2 2.14.1 - Information Disclosure
remote java CVE-2021-44228

Jeremiasz Pluta WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-43936

fuzzyap1 Free School Management Software 1.0 - Remote Code Execution (RCE)
webapps php

fuzzyap1 Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
webapps php

Enes Özeser Student Management System 1.0 - SQLi Authentication Bypass
webapps php CVE-2020-23935

Gonzalo Villegas TestLink 1.19 - Arbitrary File Download (Unauthenticated)
webapps php