Matthew Aberegg LimeSurvey 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
webapps php

Tuygun Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
webapps hardware

MegaMagnus ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC)
dos windows CVE-2020-15956

Jinson Varghese Behanan Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting
webapps php CVE-2020-15038

ghost_fh pfSense 2.4.4-p3 - Cross-Site Request Forgery
webapps php CVE-2019-16667

James Green Bludit 3.9.2 - Directory Traversal
webapps multiple CVE-2019-16113

KBA@SOGETI_ESEC WordPress Plugin Email Subscribers & Newsletters 4.2.2 - 'hash' SQL Injection (Unauthenticated)
webapps php CVE-2019-20361

KBA@SOGETI_ESEC WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
webapps php CVE-2019-19985

Sarang Tumne Port Forwarding Wizard 4.8.0 - Buffer Overflow (SEH)
local windows

KeopssGroup0day_Inc Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting
webapps php

KeopssGroup0day_Inc Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass
webapps php

gh1mau Park Ticketing Management System 1.0 - Authentication Bypass
webapps php

gh1mau Park Ticketing Management System 1.0 - 'viewid' SQL Injection
webapps php

th3d1gger Savsoft Quiz 5 - Persistent Cross-Site Scripting
webapps php

hunter gregal PHP 7.4 FFI - 'disable_functions' Bypass
webapps php

Logan Sanderson Exhibitor Web UI 1.7.1 - Remote Code Execution
webapps java CVE-2019-5029