Maximilian Barz Tiki Wiki CMS Groupware 21.1 - Authentication Bypass
webapps php

n1x_ WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting (Authenticated)
webapps multiple

Alexei Kojenov HiSilicon Video Encoders - Unauthenticated RTSP buffer overflow (DoS)
webapps hardware CVE-2020-24214

Alexei Kojenov HiSilicon Video Encoders - Full admin access via backdoor password
webapps hardware CVE-2020-24215

Alexei Kojenov HiSilicon video encoders - RCE via unauthenticated upload of malicious firmware
webapps hardware CVE-2020-24217

Alexei Kojenov HiSilicon Video Encoders - RCE via unauthenticated command injection
webapps hardware CVE-2020-24217

Alexei Kojenov HiSilicon Video Encoders - Unauthenticated file disclosure via path traversal
webapps hardware CVE-2020-24219

0xmmnbassel CS-Cart 1.3.3 - authenticated RCE
webapps php

0xmmnbassel CS-Cart 1.3.3 - 'classes_dir' LFI
webapps php

Aporlorxl23 Hotel Management System 1.0 - Remote Code Execution (Authenticated)
webapps php

Enesdex WebsiteBaker 2.12.2 - Remote Code Execution
webapps php

Aporlorxl23 Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)
webapps php

hyp3rlinx Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software
local windows

danyx07 Rukovoditel 2.7.1 - Remote Code Execution (2) (Authenticated)
webapps php CVE-2020-11819

hyp3rlinx Ericom Access Server x64 9.2.0 - Server-Side Request Forgery
webapps multiple

Alexandre ZANNI Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass
webapps php CVE-2019-17240