Neurogenesia ECOA Building Automation System - Weak Default Credentials
webapps hardware

Aryan Chehreghani Men Salon Management System 1.0 - Multiple Vulnerabilities
webapps php

Mason Soroka-Gill FlatCore CMS 2.0.7 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-39608

Aryan Chehreghani Telegram Desktop 2.9.2 - Denial of Service (PoC)
dos windows

Tagoletta Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps php

David Anglada Strapi 3.0.0-beta - Set Password (Unauthenticated)
webapps multiple CVE-2019-18818

Aryan Chehreghani Bus Pass Management System 1.0 - 'viewid' SQL Injection
webapps php

Moritz Gruber RaspAP 2.6.6 - Remote Code Execution (RCE) (Authenticated)
webapps php

Azumah Foresight Xorlali Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
webapps php

Azumah Foresight Xorlali Laundry Booking Management System 1.0 - 'Multiple' SQL Injection
webapps php

Tagoletta Simple Image Gallery 1.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps php

Azumah Foresight Xorlali RATES SYSTEM 1.0 - Authentication Bypass
webapps php

Azumah Foresight Xorlali Simple Image Gallery System 1.0 - 'id' SQL Injection
webapps php

RedTeam Pentesting GmbH Altova MobileTogether Server 7.3 - XML External Entity Injection (XXE)
webapps multiple CVE-2021-37425

Aryan Chehreghani WordPress Plugin Picture Gallery 1.4.2 - 'Edit Content URL' Stored Cross-Site Scripting (XSS)
webapps php

Brian Ombongi Cockpit CMS 0.11.1 - 'Username Enumeration & Password Reset' NoSQL Injection
webapps multiple CVE-2020-35848;CVE-2020-35847