Lance Biggerstaff PolicyKit-1 0.105-31 - Privilege Escalation
local linux CVE-2021-4034

RedTeam Pentesting GmbH Creston Web Interface 1.0.0.2159 - Credential Disclosure
webapps hardware CVE-2022-23178

Miguel Santareno Nyron 1.0 - SQLi (Unauthenticated)
webapps aspx

Gaurav Grover Online Resort Management System 1.0 - SQLi (Authenticated)
webapps php

Miguel Santareno Archeevo 5.0 - Local File Inclusion
remote windows

Yehia Elghaly WorkTime 10.20 Build 4967 - Unquoted Service Path
local windows

Aryan Chehreghani WordPress Core 5.8.2 - 'WP_Query' SQL Injection
webapps php CVE-2022-21661

Veshraj Ghimire WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)
webapps php CVE-2021-24563

Greg Foss Automox Agent 32 - Local Privilege Escalation
local windows CVE-2021-43326

Oscar Gil Gutierrez Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS)
webapps php

Fabiano Golluscio TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)
remote windows CVE-2021-35380

Yehia Elghaly TRIGONE Remote System Monitor 3.61 - Unquoted Service Path
local windows

Tagoletta Movie Rating System 1.0 - SQLi to RCE (Unauthenticated)
webapps php

Tagoletta Movie Rating System 1.0 - Broken Access Control (Admin Account Creation) (Unauthenticated)
webapps php

Yehia Elghaly Accu-Time Systems MAXIMUS 1.0 - Telnet Remote Buffer Overflow (DoS)
remote hardware

Gaetano Perrone WordPress Plugin Contact Form Entries 1.1.6 - Cross Site Scripting (XSS) (Unauthenticated)
webapps php