Dominic Clark Open-AudIT Community 4.2.0 - Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2021-44916

Bryan Leong VUPlayer 2.49 - '.wax' Local Buffer Overflow (DEP Bypass)
local windows CVE-2009-0182

Zachary Asher Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)
webapps php

Zachary Asher Online Railway Reservation System 1.0 - Admin Account Creation (Unauthenticated)
webapps php

Zachary Asher Online Railway Reservation System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps php

Oscar Sandén HTTP Commander 3.1.9 - Stored Cross Site Scripting (XSS)
webapps windows

Andrea Bocchetti WordPress Plugin AAWP 3.16 - 'tab' Reflected Cross Site Scripting (XSS) (Authenticated)
webapps php

Greg Foss Automox Agent 32 - Local Privilege Escalation
local windows CVE-2021-43326

Oscar Gil Gutierrez Projeqtor v9.3.1 - Stored Cross Site Scripting (XSS)
webapps php

Jeremiasz Pluta Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)
remote python CVE-2021-43857

Roberto Palamaro Dixell XWEB 500 - Arbitrary File Write
remote hardware

securityforeveryone.com openSIS Student Information System 8.0 - 'multiple' SQL Injection
webapps php

Milad karimi Virtual Airlines Manager 2.6.2 - 'multiple' SQL Injection
webapps php

Malcrove BeyondTrust Remote Support 6.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
webapps multiple

Andres Ramos AWebServer GhostBuilding 18 - Denial of Service (DoS)
remote android

Chinmay Divekar Hostel Management System 2.1 - Cross Site Scripting (XSS)
webapps php