Ruchi Tiwari Online Grading System 1.0 - 'uname' SQL Injection
webapps php

LiPeiYi BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting
webapps php

Justin Steven Metasploit Framework 6.0.11 - msfvenom APK template command injection
local multiple CVE-2020-7384

ABDO10 WordPress Plugin SuperForms 4.9 - Arbitrary File Upload
webapps php

Rafael Cintra Lopes jQuery UI 1.12.1 - Denial of Service (DoS)
dos multiple

Alexandre ZANNI Umbraco CMS 7.12.4 - Remote Code Execution (Authenticated)
webapps aspx

Alexandre ZANNI Fuel CMS 1.4.1 - Remote Code Execution (2)
webapps php CVE-2018-16763

Alexandre ZANNI OpenEMR 5.0.1 - Remote Code Execution (Authenticated) (2)
webapps php

Alexandre ZANNI CMSUno 1.6.2 - 'lang' Remote Code Execution (Authenticated)
webapps php CVE-2020-25557;CVE-2020-25538

Mahendra Purbia EgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site Scripting
webapps php

SunCSR Openlitespeed Web Server 1.7.8 - Command Injection (Authenticated) (1)
webapps multiple

LiquidWorm STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin)
webapps ruby

LiquidWorm STVS ProVision 5.9.10 - File Disclosure (Authenticated)
webapps ruby

CHackA0101 Oracle WebLogic Server 12.2.1.0 - RCE (Unauthenticated)
webapps java CVE-2020-14882

Chiragh Arora Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting
webapps hardware CVE-2021-3186

Marco Catalano Simple College Website 1.0 - 'full' Stored Cross Site Scripting
webapps php