Julian Rittweger openITCOCKPIT 3.6.1-2 - Cross-Site Request Forgery
webapps php 80 CVE-2019-10227

Damian Ebelties WordPress Plugin UserPro 4.9.32 - Cross-Site Scripting
webapps php 80 CVE-2019-14470

Javier Olmedo WordPress Plugin Import Export WordPress Users 1.3.1 - CSV Injection
webapps php 80 CVE-2019-15092

MTK LSoft ListServ < 16.5-2018a - Cross-Site Scripting
webapps windows CVE-2019-15501

MaYaSeVeN Nimble Streamer 3.0.2-2 < 3.5.4-9 - Directory Traversal
webapps multiple CVE-2019-11013

Jak Gibb Nagios XI 5.6.5 - Remote Code Execution / Root Privilege Escalation
webapps php

Alyssa Herrera Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure (Metasploit)
webapps multiple CVE-2019-11510

Princy Edward WordPress Plugin Add Mime Types 2.2.1 - Cross-Site Request Forgery
webapps php

Fabian Mosch YouPHPTube 7.2 - 'userCreate.json.php' SQL Injection
webapps php 80 CVE-2019-14430

Fernando A. Lagos B Webmin 1.920 - Remote Code Execution
webapps linux CVE-2019-15107

n1x_ Neo Billing 3.5 - Persistent Cross-Site Scripting
webapps php 80 CVE-2020-23518

Carlos E. Vieira Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure
webapps hardware CVE-2018-13379

Carlos E. Vieira Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit)
webapps hardware CVE-2018-13379

osamaalaa Kimai 2 - Persistent Cross-Site Scripting
webapps php 80

n1x_ Web Wiz Forums 12.01 - 'PF' SQL Injection
webapps asp

Greg.Priest Integria IMS 5.0.86 - Arbitrary File Upload
webapps php