LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Hard coded Credentials Shell Access
remote hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass
webapps hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)
webapps hardware

LiquidWorm SOYAL 701 Client 9.0.1 - Insecure Permissions
local windows

LiquidWorm SOYAL 701 Server 9.0.1 - Insecure Permissions
local windows

LiquidWorm SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF
webapps hardware

LiquidWorm SOYAL Biometric Access Control System 5.0 - Master Code Disclosure
webapps hardware

numan türle VestaCP 0.9.8 - 'v_sftp_licence' Command Injection
webapps multiple

Riadh Bouchahoua Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path
local windows

Christian Vierschilling Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated)
webapps php

Metin Yunus Kandemir BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path
local windows

Clément Cruchet LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS
webapps php CVE-2019-12962

numan türle Hestia Control Panel 1.3.2 - Arbitrary File Write
webapps php

Murat ŞEKER rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1)
webapps php

numan türle VestaCP 0.9.8 - 'v_interface' Add IP Stored XSS
webapps multiple

Mohammed Alshehri VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path
local windows