1F98D Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path
local windows

sl1nki Microweber CMS 1.1.20 - Remote Code Execution (Authenticated)
webapps php CVE-2020-28337

Artur Szymczak Linux/x86 - setreuid(0) + execve(_/bin/sh_) Shellcode (29 bytes)
linux_x86

Reza Afsahi Human Resource Information System 0.1 - 'First Name' Persistent Cross-Site Scripting (Authenticated)
webapps php

Tyler Butler PHP Timeclock 1.04 - 'Multiple' Cross Site Scripting (XSS)
webapps php

Erick Galindo TFTP Broadband 4.3.0.1465 - 'tftpt.exe' Unquoted Service Path
local windows

Erick Galindo BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path
local windows

Erick Galindo DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path
local windows

Tyler Butler PHP Timeclock 1.04 - Time and Boolean Based Blind SQL Injection
webapps php

LiquidWorm Epic Games Rocket League 1.95 - Stack Buffer Overrun
local windows

Reza Afsahi Human Resource Information System 0.1 - Remote Code Execution (Unauthenticated)
webapps php

secure77 Voting System 1.0 - Remote Code Execution (Unauthenticated)
webapps php

Erick Galindo WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path
local windows

Erick Galindo Sandboxie 5.49.7 - Denial of Service (PoC)
dos windows

secure77 Voting System 1.0 - Authentication Bypass (SQLI)
webapps php

Erick Galindo Sandboxie Plus 0.7.4 - 'SbieSvc' Unquoted Service Path
local windows