Semen Alexandrovich Lyhin NPMJS gitlabhook 0.0.17 - 'repository' Remote Command Execution
webapps json CVE-2019-5485

x00pwn File Sharing Wizard 1.5.0 - POST SEH Overflow
remote windows 80 CVE-2019-16724

x00pwn Easy File Sharing Web Server 7.2 - 'New User' Local Overflow (SEH)
local windows

x00pwn DeviceViewer 3.12.0.1 - 'creating user' Denial of Service
dos windows

0xB9 LayerBB < 1.1.4 - Cross-Site Request Forgery
webapps php CVE-2019-16531

n1x_ DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection
webapps php

xerubus Enigma NMS 65.0.0 - SQL Injection
webapps multiple 80 CVE-2019-16065

xerubus Enigma NMS 65.0.0 - OS Command Injection
webapps multiple CVE-2019-16072

xerubus Enigma NMS 65.0.0 - Cross-Site Request Forgery
webapps multiple CVE-2019-16068

hyp3rlinx Microsoft Windows NTFS - Privileged File Access Enumeration
local windows

0x48piraj Canon PRINT 2.5.5 - Information Disclosure
local android CVE-2019-14339

n1x_ Neo Billing 3.5 - Persistent Cross-Site Scripting
webapps php 80 CVE-2020-23518

n1x_ Web Wiz Forums 12.01 - 'PF' SQL Injection
webapps asp

hyp3rlinx Microsoft Windows PowerShell - Unsanitized Filename Command Execution
dos windows

xerubus Mitsubishi Electric smartRTU / INEA ME-RTU - Unauthenticated OS Command Injection Bind Shell
webapps php CVE-2019-14931

xerubus Mitsubishi Electric smartRTU / INEA ME-RTU - Unauthenticated Configuration Download
webapps php 80 CVE-2019-14927