Nawaf Alkeraithe Wing FTP Server 6.0.7 - Unquoted Service Path
local windows

LiquidWorm WEMS BEMS 21.3.1 - Undocumented Backdoor Account
webapps hardware

LiquidWorm Thrive Smart Home 1.1 - Authentication Bypass
webapps php

riamloo elearning-script 1.0 - Authentication Bypass
webapps windows

LiquidWorm HomeAutomation 3.3.2 - Remote Code Execution
webapps php

LiquidWorm HomeAutomation 3.3.2 - Cross-Site Request Forgery (Add Admin)
webapps php

LiquidWorm HomeAutomation 3.3.2 - Authentication Bypass
webapps php

LiquidWorm HomeAutomation 3.3.2 - Persistent Cross-Site Scripting
webapps hardware

Ryuji Tsutsui Django < 3.0 < 2.2 < 1.11 - Account Hijack
webapps python CVE-2019-19844

stresser Prime95 Version 29.8 build 6 - Buffer Overflow (SEH)
local windows

Gokkulraj XnConvert 1.82 - Denial of Service (PoC)
dos windows

Chris Inzinga phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
webapps php

vportal Microsoft Windows 10 BasicRender.sys - Denial of Service (PoC)
dos windows

Vulnerability-Lab Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation
webapps hardware

Chris Inzinga SurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service (SEH)
dos windows

Chris Inzinga FTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)
dos windows