Ferhat Çil Black Box Kvm Extender 3.4.31307 - Local File Inclusion
webapps hardware

Dolev Farhi Apache Superset 1.1.0 - Time-Based Account Enumeration
webapps multiple

Fatih İLGİN Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
webapps php

securityforeveryone.com WoWonder Social Network Platform 3.1 - Authentication Bypass
webapps php

Rodolfo Mariano Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF)
webapps hardware CVE-2021-32403

Fellipe Oliveira WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated)
webapps php CVE-2020-24186

flast101 PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution
webapps php

BestEffort Team Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code
local windows

Fellipe Oliveira Subrion CMS 4.2.1 - Arbitrary File Upload
webapps php CVE-2018-19422

Reza Afsahi Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery (Add Admin)
webapps php

Reza Afsahi Dental Clinic Appointment Reservation System 1.0 - 'Firstname' Persistent Cross Site Scripting (Authenticated)
webapps php

Forrest Orr Firefox 72 IonMonkey - JIT Type Confusion
local windows_x86-64 CVE-2019-17026

Forrest Orr Microsoft Internet Explorer 11 and WPAD service 'Jscript.dll' - Use-After-Free
local windows_x86-64 CVE-2020-0674

Fellipe Oliveira ZeroShell 3.9.0 - Remote Command Execution
webapps linux CVE-2019-12725

1F98D Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path
local windows

Reza Afsahi Human Resource Information System 0.1 - 'First Name' Persistent Cross-Site Scripting (Authenticated)
webapps php