Enesdex Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated)
webapps php

shoxxdj ECSIMAGING PACS 6.21.5 - SQL injection
webapps php

shoxxdj ECSIMAGING PACS 6.21.5 - Remote code execution
webapps php

gx1 Wordpress Core 5.2.2 - 'post previews' XSS
webapps php CVE-2019-16223

gx1 Wordpress Epsilon Framework Multiple Themes - Unauthenticated Function Injection
webapps php

Maximilian Barz Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation
webapps hardware

gx1 Jenkins 2.235.3 - 'X-Forwarded-For' Stored XSS
webapps java CVE-2020-2231

gx1 Jenkins 2.235.3 - 'Description' Stored XSS
webapps java CVE-2020-2230

gx1 Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
webapps java CVE-2020-2229

Ex.Mi Best Support System 3.0.4 - 'ticket_body' Persistent XSS (Authenticated)
webapps php CVE-2020-24963

Xavi Beltran Laravel Administrator 4 - Unrestricted File Upload (Authenticated)
webapps php CVE-2020-10963

xynmaps Pure-FTPd 1.0.48 - Remote Denial of Service
dos multiple

ZwX Free MP3 CD Ripper 2.8 - Multiple File Buffer Overflow (Metasploit)
local windows

ZwX Wordpress Plugin WPForms 1.6.3.1 - Persistent Cross Site Scripting (Authenticated)
webapps php

maxpl0it Microsoft Internet Explorer 11 - Use-After-Free
local windows CVE-2020-0674

Aporlorxl23 Bludit 3.9.2 - Authentication Bruteforce Bypass (Metasploit)
webapps php