Ihsan Sencan Time and Expense Management System 3.0 - 'table' SQL Injection
webapps php

LiquidWorm TP-Link TL-SC3130 1.6.18 - RTSP Stream Disclosure
webapps hardware CVE-2018-18428

Ihsan Sencan Time and Expense Management System 3.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Ismail Tasdelen BigTree CMS 4.2.23 - Cross-Site Scripting
webapps php 80 CVE-2018-18308

d0wnp0ur Heatmiser Wifi Thermostat 1.7 - Credential Disclosure
webapps hardware

Ihsan Sencan GIU Gallery Image Upload 0.3.1 - 'category' SQL Injection
webapps php 80

Ihsan Sencan MV Video Sharing Software 1.2 - 'searchname' SQL Injection
webapps php 80

Ihsan Sencan Rukovoditel Project Management CRM 2.3 - 'path' SQL Injection
webapps php 80

Ismail Tasdelen WordPress Plugin Support Board 1.2.3 - Cross-Site Scripting
webapps php 80

Ihsan Sencan Vishesh Auto Index 3.1 - 'fid' SQL Injection
webapps php 80

Ihsan Sencan Kados R10 GreenBee - 'release_id' SQL Injection
webapps php 80

Ismail Tasdelen Library CMS 2.1.1 - Cross-Site Scripting
webapps php 80

Ihsan Sencan Navigate CMS 2.8.5 - Arbitrary File Download
webapps php 80

Ihsan Sencan HotelDruid 2.2.4 - 'anno' SQL Injection
webapps php 80

Ihsan Sencan KORA 2.7.0 - 'cid' SQL Injection
webapps php 80

Ihsan Sencan Academic Timetable Final Build 7.0 - Information Disclosure
webapps php 80