n1x_ Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
webapps php 80

Cemal Cihad ÇİFTÇİ Sar2HTML 3.2.1 - Remote Command Execution
webapps php 80

Alperen Soydan Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery
webapps hardware 80

n1x_ WebIncorp ERP - SQL injection
webapps php 80

Metin Yunus Kandemir Ultimate Loan Manager 2.0 - Cross-Site Scripting
webapps multiple 80

Lucas Dinucci Oracle Hyperion Planning 11.1.2.3 - XML External Entity
webapps multiple CVE-2019-2861

Jacob Baines Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
webapps hardware CVE-2019-3948

m0ze GigToDo 1.3 - Cross-Site Scripting
webapps php 80

m0ze WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting
webapps php 80

rubyman WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery
webapps php 80 CVE-2019-14328

Wietse Boonstra Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection
webapps jsp 80 CVE-2019-10266

Wietse Boonstra Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)
webapps jsp 443 CVE-2019-10267

Wietse Boonstra Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated)
webapps jsp CVE-2019-10267

Fabian Mosch_ Nick Theisinger Moodle Filepicker 3.5.2 - Server Side Request Forgery
webapps php 80 CVE-2018-1042

Giovanni Chhatta MyBB < 1.8.21 - Remote Code Execution
webapps php

UserX Ovidentia 8.4.3 - SQL Injection
webapps php 80