LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass
webapps hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)
webapps hardware

LiquidWorm SOYAL 701 Client 9.0.1 - Insecure Permissions
local windows

LiquidWorm SOYAL 701 Server 9.0.1 - Insecure Permissions
local windows

LiquidWorm SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF
webapps hardware

LiquidWorm SOYAL Biometric Access Control System 5.0 - Master Code Disclosure
webapps hardware

xxcdd CouchCMS 2.2.1 - Server-Side Request Forgery
webapps php

numan türle VestaCP 0.9.8 - 'v_sftp_licence' Command Injection
webapps multiple

Riadh Bouchahoua Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path
local windows

Christian Vierschilling Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated)
webapps php

Metin Yunus Kandemir BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path
local windows

Piyush Patil Boonex Dolphin 7.4.2 - 'width' Stored XSS
webapps php

Clément Cruchet LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS
webapps php CVE-2019-12962

Piyush Patil Plone CMS 5.2.3 - 'Title' Stored XSS
webapps multiple

numan türle Hestia Control Panel 1.3.2 - Arbitrary File Write
webapps php

Piyush Patil SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (1)
webapps php