Sedat Ozdemir MTPutty 1.0.1.21 - SSH Password Disclosure
local windows

Y1LD1R1M LimeSurvey 5.2.4 - Remote Code Execution (RCE) (Authenticated)
webapps php

Deha Berkin Bir Croogo 3.0.2 - Remote Code Execution (Authenticated)
webapps php CVE-2021-44673

RedTeam Pentesting GmbH Auerswald COMpact 8.0B - Multiple Backdoors
remote hardware CVE-2021-40859

RedTeam Pentesting GmbH Auerswald COMpact 8.0B - Arbitrary File Disclosure
remote hardware

RedTeam Pentesting GmbH Auerswald COMpact 8.0B - Privilege Escalation
remote hardware

Mert Daş HCL Lotus Notes V12 - Unquoted Service Path
local windows

RedTeam Pentesting GmbH Auerswald COMfortel 2.8F - Authentication Bypass
remote hardware

Uriel Yochpaz WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated)
webapps php CVE-2021-39316

Abdurrahman Erkan WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated)
webapps php

Alessandro Salzano MilleGPG5 5.7.2 Luglio 2021 - Local Privilege Escalation
local windows

Tushar Jadhav Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting
webapps php CVE-2021-40577

Hubert Wojciechowski opencart 3.0.3.8 - Sessjion Injection
webapps php

Hubert Wojciechowski orangescrum 1.8.0 - 'Multiple' Cross-Site Scripting (XSS) (Authenticated)
webapps multiple

Hubert Wojciechowski orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated)
webapps multiple

Hubert Wojciechowski orangescrum 1.8.0 - Privilege escalation (Authenticated)
webapps multiple