LiquidWorm NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin)
webapps php 80

LiquidWorm NUUO NVRmini 2 3.0.8 - Remote Code Execution
webapps php 80

SySS GmbH NASdeluxe NDL-2400r 2.01.09 - OS Command Injection
webapps hardware 80

Julien Rentrop WordPress Plugin Count Per Day 3.5.4 - Persistent Cross-Site Scripting
webapps php 80

Eric Flokstra Davolink DV-2051 - Multiple Vulnerabilities
webapps cgi 80

Manuel Mancera PHP Power Browse 1.2 - Directory Traversal
webapps php 80

Vulnerability-Lab Subrion CMS 4.0.5 - SQL Injection
webapps php 80

Dolev Farhi ntop-ng 2.5.160805 - Username Enumeration
webapps multiple

Vinesh Redkar Open Upload 0.4.2 - Cross-Site Request Forgery (Add Admin)
webapps php 80

Yorick Koster WordPress Plugin ALO EasyMail NewsLetter 2.9.2 - Cross-Site Request Forgery (Add/Import Arbitrary Subscribers)
webapps php 80

Dennis Kerdijk & Erwin Kievith WordPress Plugin WP Live Chat Support 6.2.03 - Persistent Cross-Site Scripting
webapps php 80

Edwin Molenaar WordPress Plugin Booking Calendar 6.2 - SQL Injection
webapps php 80

@iamsecurity phpMyAdmin 4.6.2 - (Authenticated) Remote Code Execution
webapps php 80 CVE-2016-5734

korpritzombie Trend Micro Deep Discovery 3.7/3.8 SP1 (3.81)/3.8 SP2 (3.82) - 'hotfix_upload.cgi' Filename Remote Code Execution
webapps linux 443 CVE-2016-5840

i0akiN SEC-LABORATORY WordPress Plugin Ultimate Product Catalog 3.9.8 - do_shortcode via ajax Blind SQL Injection
webapps php 80

Orwelllabs AXIS (Multiple Products) - 'devtools ' (Authenticated) Remote Command Execution
webapps linux 80 CVE-2015-8257