Daniel Martinez Adan BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection
webapps xml

Jasper Lievisse Adriaanse Saltstack 3000.1 - Remote Code Execution
remote multiple CVE-2020-11652;CVE-2020-11651

Besim webERP 4.15.1 - Unauthenticated Backup File Access
webapps php

Saurav Shukla Online Scheduling System 1.0 - 'username' SQL Injection
webapps php

Nguyen Khang Oracle Database 11g Release 2 - 'OracleDBConsoleorcl' Unquoted Service Path
local windows

Vulnerability-Lab Fishing Reservation System 7.5 - 'uid' SQL Injection
webapps php

David Velazquez addressbook 9.0.0.1 - 'id' SQL Injection
webapps php

Xenofon Vassilakopoulos Frigate 3.36 - Buffer Overflow (SEH)
local windows

Minh Tuan Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path
local windows

Mehmet Kelepçe osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting
webapps php

Andrey Stoykov BoltWire 6.03 - Local File Inclusion
webapps php

Metasploit Apache Shiro 1.2.4 - Cookie RememberME Deserial RCE (Metasploit)
remote multiple CVE-2016-4437

boku Online Scheduling System 1.0 - Authentication Bypass
webapps php

Faiz Ahmed Zaidi Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)
webapps java CVE-2019-0235

Vulnerability-Lab HardDrive 2.1 for iOS - Arbitrary File Upload
webapps ios

Vulnerability-Lab Super Backup 2.0.5 for iOS - Directory Traversal
webapps ios