dizqueTV 1.5.3 - Remote Code Execution (RCE)

BMC Compuware iStrobe Web - 20.13 - Pre-auth RCE

STARFACE 7.3.0.10 - Authentication with Password Hash Possible

Pentaho BA Server EE 9.3.0.0-428 - Remote Code Execution (RCE) (Unauthenticated)

ZKTeco ZEM/ZMM 8.88 - Missing Authentication

Desktop Central 9.1.0 - Multiple Vulnerabilities

Openfire 4.6.0 - 'sql' Stored XSS

Openfire 4.6.0 - 'users' Stored XSS

Openfire 4.6.0 - 'groupchatJID' Stored XSS

Openfire 4.6.0 - 'path' Stored XSS

Atlassian Confluence 6.15.1 - Directory Traversal (Metasploit)

Atlassian Confluence 6.15.1 - Directory Traversal

NetGain EM Plus 10.1.68 - Remote Command Execution

Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated)

Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection

Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)