Andreas Finstad WhatsUpGold 21.0.3 - Stored Cross-Site Scripting (XSS)
webapps multiple CVE-2021-41318

Sick Codes Gurock Testrail 7.2.0.3014 - 'files.md5' Improper Access Control
webapps multiple CVE-2021-40875

Akıner Kısa Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected)
webapps multiple CVE-2021-40868

Alperen Ergel T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery (CSRF)
webapps multiple

Vulnz Antminer Monitor 0.5.0 - Authentication Bypass
webapps multiple

Sentinal920 WPanel 4.3.1 - Remote Code Execution (RCE) (Authenticated)
webapps multiple

Musyoka Ian Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution (RCE) (Unauthenticated)
webapps multiple

David Utón Strapi 3.0.0-beta.17.7 - Remote Code Execution (RCE) (Authenticated)
webapps multiple CVE-2019-19609

David Anglada Strapi 3.0.0-beta - Set Password (Unauthenticated)
webapps multiple CVE-2019-18818

numan türle ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
webapps multiple

numan türle CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated)
webapps multiple

Ai Ho ProcessMaker 3.5.4 - Local File inclusion
webapps multiple

RedTeam Pentesting GmbH Altova MobileTogether Server 7.3 - XML External Entity Injection (XXE)
webapps multiple CVE-2021-37425

Brian Ombongi Cockpit CMS 0.11.1 - 'Username Enumeration & Password Reset' NoSQL Injection
webapps multiple CVE-2020-35848;CVE-2020-35847

Amin Bohio GFI Mail Archiver 15.1 - Telerik UI Component Arbitrary File Upload (Unauthenticated)
webapps multiple

J. Francisco Bolivar Oracle Fatwire 6.3 - Multiple Vulnerabilities
webapps multiple