Ismail Tasdelen XEROX WorkCentre 7855 Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware

LiquidWorm Thrive Smart Home 1.1 - Authentication Bypass
webapps php

Ismail Tasdelen XEROX WorkCentre 6655 Printer - Cross-Site Request Forgery (Add Admin)
webapps hardware

boku FTP Navigator 8.03 - Stack Overflow (SEH)
local windows

riamloo elearning-script 1.0 - Authentication Bypass
webapps windows

boku AVS Audio Converter 9.1.2.600 - Stack Overflow (PoC)
local windows

LiquidWorm HomeAutomation 3.3.2 - Remote Code Execution
webapps php

LiquidWorm HomeAutomation 3.3.2 - Cross-Site Request Forgery (Add Admin)
webapps php

LiquidWorm HomeAutomation 3.3.2 - Authentication Bypass
webapps php

LiquidWorm HomeAutomation 3.3.2 - Persistent Cross-Site Scripting
webapps hardware

Metasploit Microsoft UPnP - Local Privilege Elevation (Metasploit)
local windows CVE-2019-1405;CVE-2019-1322

Metasploit Microsoft UPnP - Local Privilege Elevation (Metasploit)
local windows CVE-2019-1405;CVE-2019-1322

Metasploit Reptile Rootkit - reptile_cmd Privilege Escalation (Metasploit)
local linux

Metasploit OpenBSD - Dynamic Loader chpass Privilege Escalation (Metasploit)
local openbsd CVE-2019-19726

Metasploit OpenBSD - Dynamic Loader chpass Privilege Escalation (Metasploit)
local openbsd CVE-2019-19726

Ryuji Tsutsui Django < 3.0 < 2.2 < 1.11 - Account Hijack
webapps python CVE-2019-19844