C0wnuts SmartBlog 2.0.1 - 'id_post' Blind SQL injection
webapps php

Patrik Lantz TP-Link WDR4300 - Remote Code Execution (Authenticated)
remote hardware CVE-2017-13772

FishballAndMeatball Amarok 2.8.0 - Denial-of-Service
local windows CVE-2020-13152

LiquidWorm iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation
webapps hardware

LiquidWorm iDS6 DSSPro Digital Signage System 6.2 - CAPTCHA Security Bypass
webapps hardware

LiquidWorm iDS6 DSSPro Digital Signage System 6.2 - Cross-Site Request Forgery (CSRF)
webapps hardware

Mosaaed Student Attendance Management System 1.0 - 'username' SQL Injection / Remote Code Execution
webapps php

Mosaaed School Log Management System 1.0 - 'username' SQL Injection / Remote Code Execution
webapps php

David Bimmel PDW File Browser 1.3 - Remote Code Execution
webapps php

Y1LD1R1M Processwire CMS 2.4.0 - 'download' Local File Inclusion
webapps php

Mosaaed Complaints Report Management System 1.0 - 'username' SQL Injection / Remote Code Execution
webapps php

yunaranyancat Multi Restaurant Table Reservation System 1.0 - 'table_id' Unauthenticated SQL Injection
webapps php

yunaranyancat Quick N Easy FTP Service 3.2 - Unquoted Service Path
local windows

Nassim Asrir Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)
local windows CVE-2020-14425

Lyhin\'s Lab Monitorr 1.7.6m - Authorization Bypass
webapps php

Lyhin\'s Lab Monitorr 1.7.6m - Remote Code Execution (Unauthenticated)
webapps php