SunCSR Openlitespeed Web Server 1.7.8 - Command Injection (Authenticated) (1)
webapps multiple

LiquidWorm STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin)
webapps ruby

LiquidWorm STVS ProVision 5.9.10 - File Disclosure (Authenticated)
webapps ruby

CHackA0101 Oracle WebLogic Server 12.2.1.0 - RCE (Unauthenticated)
webapps java CVE-2020-14882

Chiragh Arora Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting
webapps hardware CVE-2021-3186

Marco Catalano Simple College Website 1.0 - 'full' Stored Cross Site Scripting
webapps php

Marco Catalano Simple College Website 1.0 - 'name' Sql Injection (Authentication Bypass)
webapps php

Marco Catalano Cemetry Mapping and Information System 1.0 - 'user_email' Sql Injection (Authentication Bypass)
webapps php

Metin Yunus Kandemir Klog Server 2.4.1 - Unauthenticated Command Injection (Metasploit)
webapps php CVE-2020-35729

Guillem Alminyana Linux/x64 - Bind_tcp (0.0.0.0:4444) + Password (12345678) + Shell (/bin/sh) Shellcode (142 bytes)
linux

Aitor Herrero Library System 1.0 - 'category' SQL Injection
webapps php

Richard Jones CASAP Automated Enrollment System 1.0 - 'route' Stored XSS
webapps php

Anita Gaud CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS
webapps php CVE-2021-3294

Deha Berkin Bir Collabtive 3.1 - 'address' Persistent Cross-Site Scripting
webapps php CVE-2021-3298

0xB9 MyBB Timeline Plugin 1.0 - Persistent Cross-Site Scripting
webapps php

Armando Huesca Prida Windows/x86 - Download File (http://10.10.10.5:8080/2NWyfQ9T.hta) Via mshta + Execute + Stager Shellcode (143 bytes)
windows_x86 143