Jeremiasz Pluta Online Admission System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
webapps php

Ron Jost WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection
webapps php CVE-2021-24750

Gaetano Perrone WordPress Plugin Contact Form Entries 1.1.6 - Cross Site Scripting (XSS) (Unauthenticated)
webapps php

RoseSecurity Siemens S7 Layer 2 - Denial of Service (DoS)
dos hardware

citril WBCE CMS 1.5.1 - Admin Password Reset
webapps php CVE-2021-3817

Enes Özeser Croogo 3.0.2 - 'Multiple' Stored Cross-Site Scripting (XSS)
webapps php

Enes Özeser Croogo 3.0.2 - Unrestricted File Upload
webapps php

Daniel Morales Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration
webapps multiple CVE-2021-44848

hyp3rlinx Microsoft Internet Explorer / ActiveX Control - Security Bypass
local windows

LiquidWorm meterN v1.2.3 - Remote Code Execution (RCE) (Authenticated)
webapps php

LiquidWorm Zucchetti Axess CLOKI Access Control 1.64 - Cross Site Request Forgery (CSRF)
webapps hardware

kozmer Apache Log4j 2 - Remote Code Execution (RCE)
remote java CVE-2021-44228

Jeremiasz Pluta WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated)
webapps php CVE-2021-43936

Nicholas Ferreira OpenCATS 0.9.4 - Remote Code Execution (RCE)
webapps php

Ron Jost Wordpress Plugin Catch Themes Demo Import 1.6.1 - Remote Code Execution (RCE) (Authenticated)
webapps php

Enes Özeser Student Management System 1.0 - SQLi Authentication Bypass
webapps php CVE-2020-23935