Matthew Aberegg LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
webapps php

maj0rmil4d Seowon SlC 130 Router - Remote Code Execution
webapps hardware

Mohamed Elobeid Complaint Management System 1.0 - 'cid' SQL Injection
webapps php

İsmail ERKEK PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)
webapps hardware

Enes Özeser ElkarBackup 1.3.3 - Persistent Cross-Site Scripting
webapps php

Tuygun Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
webapps hardware

Mayur Parmar Savsoft Quiz 5 - Stored Cross-Site Scripting
webapps php CVE-2020-24609

Moaaz Taha Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
webapps php

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
webapps hardware

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure
webapps hardware

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion
webapps hardware

LiquidWorm QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure
webapps hardware

West Shepherd Microsoft SharePoint Server 2019 - Remote Code Execution
webapps aspx CVE-2020-1147

Alexandre ZANNI Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass
webapps php CVE-2019-17240

boku GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)
webapps php

Dan Duffy Artica Proxy 4.3.0 - Authentication Bypass
webapps hardware CVE-2020-17506