Metin Yunus Kandemir Ultimate Loan Manager 2.0 - Cross-Site Scripting
webapps multiple 80

Lucas Dinucci Oracle Hyperion Planning 11.1.2.3 - XML External Entity
webapps multiple CVE-2019-2861

Jacob Baines Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
webapps hardware CVE-2019-3948

m0ze GigToDo 1.3 - Cross-Site Scripting
webapps php 80

m0ze WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting
webapps php 80

rubyman WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery
webapps php 80 CVE-2019-14328

Wietse Boonstra Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection
webapps jsp 80 CVE-2019-10266

Wietse Boonstra Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)
webapps jsp 443 CVE-2019-10267

Wietse Boonstra Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated)
webapps jsp CVE-2019-10267

Fabian Mosch_ Nick Theisinger Moodle Filepicker 3.5.2 - Server Side Request Forgery
webapps php 80 CVE-2018-1042

Giovanni Chhatta MyBB < 1.8.21 - Remote Code Execution
webapps php

UserX Ovidentia 8.4.3 - SQL Injection
webapps php 80

n3k00n3 Ovidentia 8.4.3 - Cross-Site Scripting
webapps php 80 CVE-2019-13977

yasin WordPress Plugin Hybrid Composer 1.4.6 - Improper Access Restrictions
webapps php

Mehmet Onder Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery
webapps hardware CVE-2019-12624

n1x_ NoviSmart CMS - SQL injection
webapps php