Metin Yunus Kandemir Klog Server 2.4.1 - Unauthenticated Command Injection (Metasploit)
webapps php CVE-2020-35729

Aitor Herrero Library System 1.0 - 'category' SQL Injection
webapps php

Richard Jones CASAP Automated Enrollment System 1.0 - 'route' Stored XSS
webapps php

Deha Berkin Bir Collabtive 3.1 - 'address' Persistent Cross-Site Scripting
webapps php CVE-2021-3298

Armando Huesca Prida Windows/x86 - Download File (http://10.10.10.5:8080/2NWyfQ9T.hta) Via mshta + Execute + Stager Shellcode (143 bytes)
windows_x86 143

Hodorsec ERPNext 12.14.0 - SQL Injection (Authenticated)
webapps multiple

LiquidWorm Selea Targa IP OCR-ANPR Camera - 'addr' Remote Code Execution (Unauthenticated)
webapps hardware

LiquidWorm Selea Targa 512 IP OCR-ANPR Camera - Stream Disclosure (Unauthenticated)
webapps hardware

LiquidWorm Selea Targa IP OCR-ANPR Camera - CSRF Add Admin
webapps hardware

LiquidWorm Selea Targa IP OCR-ANPR Camera - Multiple SSRF (Unauthenticated)
webapps hardware

LiquidWorm Selea Targa IP OCR-ANPR Camera - Directory Traversal File Disclosure (Unauthenticated)
webapps hardware

LiquidWorm Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite
webapps hardware

LiquidWorm Selea Targa IP OCR-ANPR Camera - 'files_list' Remote Stored XSS
webapps hardware

LiquidWorm Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation
local windows

LiquidWorm Selea CarPlateServer (CPS) 4.0.1.6 - Remote Program Execution
webapps multiple

Ninad Mishra Anchor CMS 0.12.7 - CSRF (Delete user)
webapps multiple CVE-2020-23342