Jannick Tiger Student Record System 4.0 - 'cid' SQL Injection
webapps php

Lyghtnox Home Assistant Community Store (HACS) 1.10.0 - Directory Traversal
webapps python

Chiragh Arora Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting
webapps hardware CVE-2021-3186

Guillem Alminyana Linux/x64 - Bind_tcp (0.0.0.0:4444) + Password (12345678) + Shell (/bin/sh) Shellcode (142 bytes)
linux

Anita Gaud CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS
webapps php CVE-2021-3294

Matthew Aberegg Nagios XI 5.7.5 - Multiple Persistent Cross-Site Scripting
webapps php

omurugur Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 - Stored XSS
webapps multiple

Rahul Ramakant Singh WordPress Plugin Easy Contact Form 1.1.7 - 'Name' Stored Cross-Site Scripting (XSS)
webapps php

Jaimin Gondaliya Prestashop 1.7.7.0 - 'id_product' Time Based Blind SQL Injection
webapps php

Ramazan Mert GÖKTEN Anchor CMS 0.12.7 - 'markdown' Stored Cross-Site Scripting
webapps multiple

Rahul Ramakant Singh Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF)
webapps php

Geovanni Ruiz Intel(R) Matrix Storage Event Monitor x86 8.0.0.1039 - 'IAANTMON' Unquoted Service Path
local windows

Francisco Javier Santiago Vázquez Advanced Comment System 1.0 - 'ACS_path' Path Traversal
webapps php CVE-2020-35598

Ritesh Gohil 4images v1.7.11 - 'Profile Image' Stored Cross-Site Scripting
webapps php

gx1 Wordpress Core 5.2.2 - 'post previews' XSS
webapps php CVE-2019-16223

gx1 Wordpress Epsilon Framework Multiple Themes - Unauthenticated Function Injection
webapps php