Andrea Intilangelo Amica Prodigy 1.7 - Privilege Escalation
local windows CVE-2021-35312

Aryan Chehreghani WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
webapps php

Gr33nh4t Aruba Instant 8.7.1.0 - Arbitrary File Modification
remote hardware CVE-2021-25155

Eleonora Guardini Church Management System 1.0 - SQL Injection (Authentication Bypass) + Arbitrary File Upload + RCE
webapps php

Beren Kuday GÖRÜN WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)
webapps php CVE-2018-15877

TheSmuggler WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 - Directory Traversal
webapps php

Geiseric Online Voting System 1.0 - SQLi (Authentication Bypass) + Remote Code Execution (RCE)
webapps php

Andrea Intilangelo WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control
local windows CVE-2021-34110

Alperen Ergel b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
webapps php

Stig Magnus Baugstø Scratch Desktop 3.17 - Remote Code Execution
webapps multiple CVE-2020-7750

Maide Ilkay Aydogdu Lightweight facebook-styled blog 1.3 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
webapps php

Brian Rodriguez SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
local windows

Pergyz Adobe ColdFusion 8 - Remote Command Execution (RCE)
webapps cfm CVE-2009-2265

Berk Can Geyikci Online Library Management System 1.0 - Arbitrary File Upload Remote Code Execution (Unauthenticated)
webapps php

Berk Can Geyikci Online Library Management System 1.0 - 'Search' SQL Injection
webapps php

Tagoletta Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)
webapps php