Ron Jost Codiad 2.8.4 - Remote Code Execution (Authenticated) (3)
webapps multiple CVE-2018-19423

Ismael Nava RarmaRadio 2.72.8 - Denial of Service (PoC)
dos windows

Mesut Cetin WordPress Plugin Cookie Law Bar 1.2.1 - 'clb_bar_msg' Stored Cross-Site Scripting (XSS)
webapps php

Vinay H C Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)
webapps php

Bastijn Ouwendijk WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)
webapps php CVE-2021-24299

Ron Jost Codiad 2.8.4 - Remote Code Execution (Authenticated) (2)
webapps multiple CVE-2019-19208

Marek Toth Shopizer 2.16.0 - 'Multiple' Cross-Site Scripting (XSS)
webapps java CVE-2021-33561;CVE-2021-33562

Emmanuel Lujan ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path
local windows

Erick Galindo DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
local windows

Ismael Nava iDailyDiary 4.30 - Denial of Service (PoC)
dos windows

Emir Polat Schlix CMS 2.2.6-6 - Arbitary File Upload (Authenticated)
webapps multiple

legend Solaris SunSSH 11.0 x86 - libpam Remote Root (2)
remote solaris CVE-2020-14871

mekhalleh Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
webapps windows CVE-2021-26855

Mansoor R WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)
webapps php

Paolo Stagno DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)
local windows CVE-2021-21551

BestEffort Team Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code
local windows