LiquidWorm AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot
webapps hardware

LiquidWorm AVE DOMINAplus 1.10.x - Credential Disclosure
webapps hardware

LiquidWorm WEMS BEMS 21.3.1 - Undocumented Backdoor Account
webapps hardware

Ismail Tasdelen XEROX WorkCentre 7830 Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware

Ismail Tasdelen XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware

LiquidWorm Thrive Smart Home 1.1 - Authentication Bypass
webapps php

Ismail Tasdelen XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware

riamloo elearning-script 1.0 - Authentication Bypass
webapps windows

LiquidWorm HomeAutomation 3.3.2 - Remote Code Execution
webapps php

LiquidWorm HomeAutomation 3.3.2 - Cross-Site Request Forgery (Add Admin)
webapps php

LiquidWorm HomeAutomation 3.3.2 - Authentication Bypass
webapps php

LiquidWorm HomeAutomation 3.3.2 - Persistent Cross-Site Scripting
webapps hardware

Ryuji Tsutsui Django < 3.0 < 2.2 < 1.11 - Account Hijack
webapps python CVE-2019-19844

Chris Inzinga phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
webapps php

Vulnerability-Lab Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation
webapps hardware

Bishop Fox Telerik UI - Remote Code Execution via Insecure Deserialization
webapps aspx CVE-2019-18935