Florian Gassner 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH)
local windows

SunCSR Team WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)
webapps php

Kislay Kumar Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS
webapps php

Kislay Kumar Library Management System 3.0 - _Add Category_ Stored XSS
webapps php

Matthew Aberegg Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated)
webapps php

Raffaele Sabato Online Marriage Registration System 1.0 - 'searchdata' SQL Injection
webapps php CVE-2020-35151

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS
webapps multiple CVE-2020-20139

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS
webapps multiple CVE-2020-20142

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS
webapps multiple CVE-2020-20141

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS
webapps multiple CVE-2020-20140

Ramikan SCO Openserver 5.0.7 - 'outputform' Command Injection
webapps sco CVE-2020-25494

Ramikan SCO Openserver 5.0.7 - 'section' Reflected XSS
webapps sco CVE-2020-25495

Ramikan Spiceworks 7.5 - HTTP Header Injection
webapps windows CVE-2020-25901

Kislay Kumar Queue Management System 4.0.0 - _Add User_ Stored XSS
webapps php

RedTeam Pentesting GmbH FRITZ!Box 7.20 - DNS Rebinding Protection Bypass
remote hardware CVE-2020-26887

Kislay Kumar Xeroneit Library Management System 3.1 - _Add Book Category _ Stored XSS
webapps php