Vulnerability-Lab Rocket LMS 1.1 - Persistent Cross Site Scripting (XSS)
webapps php

Vulnerability-Lab uDoctorAppointment v2.1.1 - 'Multiple' Cross Site Scripting (XSS)
webapps php

RedTeam Pentesting GmbH Creston Web Interface 1.0.0.2159 - Credential Disclosure
webapps hardware CVE-2022-23178

Miguel Santareno Nyron 1.0 - SQLi (Unauthenticated)
webapps aspx

LiquidWorm OpenBMCS 2.4 - Information Disclosure
webapps php

LiquidWorm OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated)
webapps php

LiquidWorm OpenBMCS 2.4 - Create Admin / Remote Privilege Escalation
webapps php

LiquidWorm OpenBMCS 2.4 - SQLi (Authenticated)
webapps php

LiquidWorm OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)
webapps php

Gaurav Grover Online Resort Management System 1.0 - SQLi (Authenticated)
webapps php

Miguel Santareno Archeevo 5.0 - Local File Inclusion
remote windows

Aryan Chehreghani WordPress Core 5.8.2 - 'WP_Query' SQL Injection
webapps php CVE-2022-21661

Betul Denizler SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated)
webapps php

Veshraj Ghimire WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)
webapps php CVE-2021-24563

hyp3rlinx Microsoft Windows Defender - Detections Bypass
local windows

hyp3rlinx Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass
local windows