BestEffort Team Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code
local windows

nu11secur1ty Spotweb 1.4.9 - DOM Based Cross-Site Scripting (XSS)
webapps multiple

Emmanuel Lujan Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
local windows

Emmanuel Lujan Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
local windows

Alejandra Sánchez ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path
local windows

Rohit Burke COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)
webapps php

Rohit Burke COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass)
webapps php

Metin Yunus Kandemir ManageEngine ADSelfService Plus 6.1 - CSV Injection
webapps multiple

Gulab Mondal In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection
webapps multiple CVE-2021-27828

Luis Martínez WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
dos ios

H.H.A.Ravindu Priyankara Visual Studio Code 1.47.1 - Denial of Service (PoC)
local windows

Hosein Vita WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)
webapps php CVE-2021-24245

Gonzalo Villegas Microsoft Exchange 2019 - Unauthenticated Email Download
webapps windows CVE-2021-26855

Dimitrios Mitakos EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection
webapps php

bwnz Printable Staff ID Card Creator System 1.0 - 'email' SQL Injection
webapps php

Fellipe Oliveira Subrion CMS 4.2.1 - Arbitrary File Upload
webapps php CVE-2018-19422