ALI AL SINAN Newgen Correspondence Management System (corms) eGov 12.0 - IDOR
webapps multiple CVE-2020-35737

Rahul Ramakant Singh Advanced Webhost Billing System 3.7.0 - Cross-Site Request Forgery (CSRF)
webapps php

SunCSR CSZ CMS 1.2.9 - Multiple Cross-Site Scripting
webapps php

Sun* Cyber Security Research Team Responsive FileManager 9.13.4 - 'path' Path Traversal
webapps php

Francisco Javier Santiago Vázquez Advanced Comment System 1.0 - 'ACS_path' Path Traversal
webapps php CVE-2020-35598

Florian Gassner 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH)
local windows

SunCSR Team WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)
webapps php

SunCSR Team Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit)
webapps php

Shwetabh Vishnoi Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
webapps php

Eshan Singh CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
webapps php

Valerio Alessandroni Online Matrimonial Project 1.0 - Authenticated Remote Code Execution
webapps php

Vyshnav nk ElkarBackup 1.3.3 - 'Policy[name]' and 'Policy[Description]' Stored Cross-site Scripting
webapps php

SunCSR Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)
webapps php

Sun* Cyber Security Research Team WonderCMS 3.1.3 - 'uploadFile' Stored Cross-Site Scripting
webapps php

Luis Sandoval Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path
local windows

SunCSR Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service
webapps multiple CVE-2020-13951