Vulnerability-Lab VestaCP 0.9.8-26 - 'backup' Information Disclosure
webapps multiple

Vulnerability-Lab VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation
webapps multiple

Vulnerability-Lab Huawei HedEx Lite 200R006C00SPC005 - Path Traversal
remote windows

Andrés Roldán Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)
remote windows

Ritesh Gohil Employee Performance Evaluation System 1.0 - 'Task and Description' Persistent Cross Site Scripting
webapps php

Sakshi Sharma Online Bus Ticket Reservation 1.0 - SQL Injection
webapps php

0rbz_ Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow
remote windows

Pruthvi Nekkanti Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting
webapps php

Mohammed Alshehri Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
local windows

iqzer0 Laravel Nova 3.7.0 - 'range' DoS
webapps php

Hemant Patidar Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
webapps php

Dhruv Patel Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
webapps php

Ultra Security Team Testa Online Test Management System 3.4.7 - 'q' SQL Injection
webapps multiple

KeopssGroup0day_Inc Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection
webapps multiple

Parshwa Bhavsar Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting
webapps php

Pankaj Verma Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)
webapps multiple CVE-2020-28976;CVE-2020-28977;CVE-2020-28978