Daniel Ortiz forma.lms 5.6.40 - Cross-Site Request Forgery (Change Admin Email)
webapps php

Daniel Monzón Online Healthcare Patient Record Management System 1.0 - Authentication Bypass
webapps php

Daniel Ortiz forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
webapps php

Daniel Ortiz Complaint Management System 1.0 - 'username' SQL Injection
webapps php

Csaba Fitzl MacOS 320.whatis Script - Privilege Escalation
local macos

KouroshRZ GitLab 12.9.0 - Arbitrary File Read
webapps ruby

Cold z3ro NEC Electra Elite IPK II WebPro 01.03.01 - Session Enumeration
webapps hardware

Daniel Martinez Adan BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection
webapps xml

David Velazquez addressbook 9.0.0.1 - 'id' SQL Injection
webapps php

Faiz Ahmed Zaidi Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)
webapps java CVE-2019-0235

Daniel Monzón Online Course Registration 2.0 - Authentication Bypass
webapps php

Uriel Yochpaz Popcorn Time 6.2 - 'Update service' Unquoted Service Path
local windows

jizhicms jizhi CMS 1.6.7 - Arbitrary File Download
webapps php

bzyo Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)
local windows

Daniel Monzón WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion
webapps php

Gal Weizman WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting
webapps multiple CVE-2019-18426