M. Cory Billington SuiteCRM 7.11.18 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
webapps php CVE-2021-42840

Yehia Elghaly Xlight FTP 3.9.3.1 - Buffer Overflow (PoC)
dos windows

Cristian \'void\' Giustini FormaLMS 2.4.4 - Authentication Bypass
webapps multiple CVE-2021-43136

Yehia Elghaly AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC)
dos windows

Yehia Elghaly AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)
dos windows

Ragavender A G Employee Daily Task Management System 1.0 - 'Name' Stored Cross-Site Scripting (XSS)
webapps php

Aryan Chehreghani Money Transfer Management System 1.0 - Authentication Bypass
webapps php

Brian Rodriguez 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
local windows

Anubhav Singh Employee Record Management System 1.2 - 'empid' SQL injection (Unauthenticated)
webapps php

Pedro Sousa Rodrigues Dynojet Power Core 2.3.0 - Unquoted Service Path
local windows

3ndG4me WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)
webapps multiple CVE-2021-31682

NgoAnhDuc Umbraco v8.14.1 - 'baseUrl' SSRF
webapps aspx

Anubhav Singh PHPGurukul Hostel Management System 2.1 - Cross-site request forgery (CSRF) to Cross-site Scripting (XSS)
webapps php

samguy phpMyAdmin 4.8.1 - Remote Code Execution (RCE)
webapps php CVE-2018-12613

samguy Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2)
webapps php

Sam Ferguson Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
webapps php