Charl-Alexandre Le Brun Movable Type 7 r.5002 - XMLRPC API OS Command Injection (Metasploit)
webapps cgi CVE-2021-20837

Murat DEMİRCİ WordPress Plugin Supsystic Contact Form 1.7.18 - 'label' Stored Cross-Site Scripting (XSS)
webapps php

Murat DEMİRCİ WordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS)
webapps php

Alessandro Salzano Gestionale Open 11.00.00 - Local Privilege Escalation
local windows

Alessandro Salzano OpenClinic GA 5.194.18 - Local Privilege Escalation
local windows

Nehru Sethuraman Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)
webapps asp

SadKris Engineers Online Portal 1.0 - File Upload Remote Code Execution (RCE)
webapps php

Mert Daş Netgear Genie 2.4.64 - Unquoted Service Path
local windows

Sam Ferguson Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
webapps php

z4nd3r Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
webapps windows

Oscar Gil Gutierrez Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
webapps php

Mert Daş Macro Expert 4.7 - Unquoted Service Path
local windows

Chase Comardelle Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
webapps php

RedTeam Pentesting GmbH myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
webapps multiple CVE-2021-42566;CVE-2021-42565

David Álvarez Robles WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
webapps php CVE-2021-24719

Basavaraj Banakar Plastic SCM 10.0.16.5622 - WebAdmin Server Access
webapps multiple CVE-2021-41382