LiquidWorm SnapGear Management Console SG560 3.1.5 - Cross-Site Request Forgery (Add Super User)
webapps hardware

LiquidWorm Cayin Content Management Server 11.0 - Remote Command Injection (root)
webapps multiple

Enesdex Online Marriage Registration System 1.0 - Remote Code Execution (1)
webapps php

huzaifa hussain D-Link DIR-615 T1 20.10 - CAPTCHA Bypass
webapps hardware CVE-2019-17525

Gus Ralph Navigate CMS 2.8.7 - Authenticated Directory Traversal
webapps php

Tomas Melicher VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution
webapps java

Gus Ralph Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin)
webapps php

BKpatron Clinic Management System 1.0 - Authenticated Arbitrary File Upload
webapps php

TSAR Oriol Espinal CMS 1.0 - 'id' SQL Injection
webapps php

Gus Ralph Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)
webapps php

BKpatron Clinic Management System 1.0 - Unauthenticated Remote Code Execution
webapps php

Enesdex Hostel Management System 2.0 - 'id' SQL Injection (Unauthenticated)
webapps php

0xd0ff9 AirControl 1.4.2 - PreAuth Remote Code Execution
webapps hardware

Kailash Bohara OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)
webapps php CVE-2020-10596

BKpatron Clinic Management System 1.0 - Authentication Bypass
webapps php

s1gh QuickBox Pro 2.1.8 - Authenticated Remote Code Execution
webapps php CVE-2020-13448