Joan Martinez Elasticsearch ECE 7.13.3 - Anonymous Database Dump
webapps multiple CVE-2021-22146

r0ny ElasticSearch 7.13.3 - Memory disclosure
webapps multiple CVE-2021-22145

Central InfoSec Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS)
webapps multiple CVE-2019-0221

Central InfoSec Apache Tomcat 9.0.0.M1 - Open Redirect
webapps multiple CVE-2018-11784

Patrik Lantz Wyomind Help Desk 1.3.6 - Remote Code Execution (RCE)
webapps multiple

Andrea D\'Ubaldo Visual Tools DVR VX16 4.2.28.0 - OS Command Injection (Unauthenticated)
webapps multiple CVE-2021-42071

Alhasan Abbas perfexcrm 1.10 - 'State' Stored Cross-site scripting (XSS)
webapps multiple

Stig Magnus Baugstø Scratch Desktop 3.17 - Remote Code Execution
webapps multiple CVE-2020-7750

Audencia Business SCHOOL Red Team Vianeos OctoPUS 5 - 'login_user' SQLi
webapps multiple

Barış Yıldızoğlu Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
webapps multiple

Dolev Farhi Apache Superset 1.1.0 - Time-Based Account Enumeration
webapps multiple

CHackA0101 VMware vCenter Server 7.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps multiple CVE-2021-21972

Abdulazeez Alaseeri Accela Civic Platform 21.1 - 'contactSeqNumber' Insecure Direct Object References (IDOR)
webapps multiple CVE-2021-34369

Abdulazeez Alaseeri Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)
webapps multiple CVE-2021-34370

Luca.Chiou Solar-Log 500 2.8.2 - Unprotected Storage of Credentials
webapps multiple

Luca.Chiou Solar-Log 500 2.8.2 - Incorrect Access Control
webapps multiple