n1x_ DIGIT CENTRIS 4 ERP - 'datum1' SQL Injection
webapps php

Noman Riffat Western Digital My Book World II NAS 1.02.12 - Authentication Bypass / Command Execution
webapps hardware CVE-2019-16399

cakes Hospital-Management 1.26 - 'fname' SQL Injection
webapps php

cakes CollegeManagementSystem-CMS 1.3 - 'batch' SQL Injection
webapps php

Pankaj Kumar Thakur Symantec Advanced Secure Gateway (ASG) / ProxySG - Unrestricted File Upload
webapps cfm CVE-2016-10258

azams NetGain EM Plus 10.1.68 - Remote Command Execution
webapps jsp

cakes College-Management-System 1.2 - Authentication Bypass
webapps php

cakes Ticket-Booking 1.4 - Authentication Bypass
webapps php

SEC Consult LimeSurvey 3.17.13 - Cross-Site Scripting
webapps php 80 CVE-2019-16173;CVE-2019-16172

Manuel García Cárdenas phpMyAdmin 4.9.0.1 - Cross-Site Request Forgery
webapps php 80 CVE-2019-12922

Metin Yunus Kandemir Dolibarr ERP-CRM 10.0.1 - 'User-Agent' Cross-Site Scripting
webapps php CVE-2019-16197

Photubias eWON Flexy - Authentication Bypass
webapps hardware

Nassim Asrir AVCON6 systems management platform - OGNL Remote Command Execution
webapps java

MTK WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting (2)
webapps php 80 CVE-2019-16118

MTK WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting
webapps php 80 CVE-2019-16117

MTK WordPress Plugin Photo Gallery 1.5.34 - SQL Injection
webapps php 80 CVE-2019-16119