Oğuz Türkgenç Company Visitor Management System (CVMS) 1.0 - Authentication Bypass
webapps php

Daniel Monzón rConfig 3.9.5 - Remote Code Execution (Unauthenticated)
webapps php

bzyo MedDream PACS Server 6.8.3.751 - Remote Code Execution (Unauthenticated)
webapps php

Enes Özeser DynPG 4.9.1 - Persistent Cross-Site Scripting (Authenticated)
webapps php

Ataberk YAVUZER Kentico CMS 9.0-12.0.49 - Persistent Cross Site Scripting
webapps php CVE-2019-19493

bzyo MedDream PACS Server 6.8.3.751 - Remote Code Execution (Authenticated)
webapps php

Shahrukh Iqbal Mirza MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)
webapps php

Burhanettin Ozgenc ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path
local windows

Hzllaga ThinkAdmin 6 - Arbitrarily File Read
webapps php CVE-2020-25540

zb3 Tiandy IPC and NVR 9.12.7 - Credential Disclosure
webapps hardware

Moaaz Taha Online Book Store 1.0 - 'id' SQL Injection
webapps php

Moaaz Taha Online Shopping Alphaware 1.0 - 'id' SQL Injection
webapps php

Enes Özeser ElkarBackup 1.3.3 - Persistent Cross-Site Scripting
webapps php

Moaaz Taha Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
webapps php

Alexandre ZANNI Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass
webapps php CVE-2019-17240

zenofex vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
webapps php