Janusz Piechówka Jenkins < 1.650 - Java Deserialization
remote java CVE-2016-0792

Kacper Szurek ManageEngine Desktop Central 10 Build 100087 - Remote Code Execution (Metasploit)
webapps java CVE-2017-11346

Kacper Szurek QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass
webapps php 8080

Kacper Szurek Dell Customer Connect 1.3.28.0 - Local Privilege Escalation
local windows

Kacper Szurek CyberGhost 6.0.4.2205 - Local Privilege Escalation
local windows

Kacper Szurek ShadeYouVPN Client 2.0.1.11 - Local Privilege Escalation
local windows

Kacper Szurek IVPN Client 2.6.1 - Local Privilege Escalation
local windows

Kacper Szurek Viscosity 1.6.7 - Local Privilege Escalation
local windows

Mariusz Poplawski HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download
webapps php

Kacper Szurek WD My Cloud Mirror 2.11.153 - Authentication Bypass / Remote Code Execution
webapps hardware

Kacper Szurek SentryHD 02.01.12e - Local Privilege Escalation
local windows

Kacper Szurek WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege Escalation
webapps php

Kacper Szurek AbanteCart 1.2.7 - Cross-Site Scripting
webapps php

Kacper Szurek WinPower 4.9.0.4 - Local Privilege Escalation
local windows

Kacper Szurek e107 CMS 2.1.2 - Privilege Escalation
webapps php

Kacper Szurek Dolphin 7.3.0 - Error-Based SQL Injection
webapps php 80