Mayur Parmar Savsoft Quiz 5 - Stored Cross-Site Scripting
webapps php CVE-2020-24609

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
webapps hardware

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure
webapps hardware

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion
webapps hardware

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure
webapps hardware

West Shepherd Microsoft SharePoint Server 2019 - Remote Code Execution
webapps aspx CVE-2020-1147

Alexandre ZANNI Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass
webapps php CVE-2019-17240

Roel van Beurden CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload
webapps php

Roel van Beurden Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)
webapps php

Daniel Bertoni BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path
local windows

Bhadresh Patel ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)
webapps java

screetsec Daily Expenses Management System 1.0 - 'item' SQL Injection
webapps php

LiquidWorm All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
webapps hardware

Luis Martínez CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
local windows

screetsec Victor CMS 1.0 - 'Search' SQL Injection
webapps php

Luis Martínez QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (PoC)
dos windows