Sam Ferguson Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
webapps php

Pablo Santiago Clinic Management System 1.0 - SQL injection to Remote Code Execution
webapps php

Mayank Deshmukh Jetty 9.4.37.v20210219 - Information Disclosure
webapps java CVE-2021-28164

z4nd3r Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
webapps windows

Ghuliev Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
webapps php

Oscar Gil Gutierrez Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
webapps php

Jacob Baines SonicWall SMA 10.2.1.0-17sv - Password Reset
webapps hardware CVE-2021-20034

Chase Comardelle Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
webapps php

RedTeam Pentesting GmbH myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
webapps multiple CVE-2021-42566;CVE-2021-42565

David Álvarez Robles WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
webapps php CVE-2021-24719

Basavaraj Banakar Plastic SCM 10.0.16.5622 - WebAdmin Server Access
webapps multiple CVE-2021-41382

Aniket Deshmane Company's Recruitment Management System 1.0 - 'Add New user' Cross-Site Request Forgery (CSRF)
webapps php

Aniket Deshmane Company's Recruitment Management System 1.0 - 'description' Stored Cross-Site Scripting (XSS)
webapps php

Hamit CİBO Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
webapps hardware CVE-2018-16061

Hamit CİBO Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
webapps hardware CVE-2018-16060

Aniket Deshmane Company's Recruitment Management System 1.0. - 'title' Stored Cross-Site Scripting (XSS)
webapps php