Mohamed Abdellatif Jaber Bagisto 1.3.3 - Client-Side Template Injection
webapps multiple

S1lv3r CMSimple 5.4 - Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated)
webapps php

Aryan Chehreghani HTTPDebuggerPro 9.11 - Unquoted Service Path
local windows

Mr Empy FLEX 1085 Web 1.6.0 - HTML Injection
webapps multiple

Keyvan Hardani Wordpress Plugin WP Guppy 1.1 - WP-JSON API Sensitive Information Disclosure
webapps php

Roberto Gesteira Miñarro GNU gdbserver 9.2 - Remote Command Execution (RCE)
remote linux

Ilker Burak ADIYAMAN Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection
webapps php

Keyvan Hardani Wordpress Plugin Smart Product Review 1.0.4 - Arbitrary File Upload
webapps php

M. Cory Billington SuiteCRM 7.11.18 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
webapps php CVE-2021-42840

Rahad Chowdhury Quick.CMS 6.7 - Cross Site Request Forgery (CSRF) to Cross Site Scripting (XSS) (Authenticated)
webapps php

djebbaranon Online Learning System 2.0 - Remote Code Execution (RCE)
webapps php CVE-2021-42580

Rahad Chowdhury Fuel CMS 1.4.13 - 'col' Blind SQL Injection (Authenticated)
webapps php

Daniel Haro Simple Subscription Website 1.0 - SQLi Authentication Bypass
webapps php CVE-2021-43140

Fabricio Salomao KONGA 0.14.9 - Privilege Escalation
webapps multiple

Davide Taraschi WordPress Plugin WPSchoolPress 2.1.16 - 'Multiple' Cross Site Scripting (XSS)
webapps php CVE-2021-24664

Marcio Mendes Windows MultiPoint Server 2011 SP1 - RpcEptMapper and Dnschade Local Privilege Escalation
local windows