feedersec Cherry Music 0.35.1 - Arbitrary File Disclosure
webapps php 80 CVE-2015-8309

redrain Airmail 3.0.2 - Cross-Site Scripting
webapps osx

Daniele Linguaglossa Vodafone Mobile Wifi - Reset Admin Password
webapps hardware 80

Zzzians Zabbix 2.0 < 3.0.3 - SQL Injection
webapps php

Ross Marks Jobberbase 2.0 - Multiple Vulnerabilities
webapps php 80

Dawid Golunski Adobe ColdFusion < 11 Update 10 - XML External Entity Injection
webapps multiple CVE-2016-4264

i-Hmx FreePBX 13.0.x < 13.0.154 - Remote Command Execution
webapps php

kor3k CumulusClips 2.4.1 - Multiple Vulnerabilities
webapps php 80

Saeed reza Zamanian PHPIPAM 1.2.1 - Multiple Vulnerabilities
webapps php 80

Persian Hack Team WordPress Plugin RB Agency 2.4.7 - Local File Disclosure
webapps php 80

b1ack0wl Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery)
webapps hardware

LiquidWorm ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting
webapps jsp 8088

LiquidWorm ZKTeco ZKBioSecurity 3.0 - 'visLogin.jsp' Local Authentication Bypass
webapps jsp

LiquidWorm ZKTeco ZKBioSecurity 3.0 - Directory Traversal
webapps jsp 8088

LiquidWorm ZKTeco ZKBioSecurity 3.0 - Cross-Site Request Forgery (Add Superadmin)
webapps jsp 8088

LiquidWorm ZKTeco ZKBioSecurity 3.0 - Hard-Coded Credentials SYSTEM Remote Code Execution
webapps jsp 8088