Hemant Patidar Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
webapps multiple CVE-2020-29477

LiquidWorm Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure
webapps hardware

LiquidWorm Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
webapps hardware

Sagar Banwa mojoPortal forums 2.7.0.0 - 'Title' Persistent Cross-Site Scripting
webapps multiple

Valerio Alessandroni Online Matrimonial Project 1.0 - Authenticated Remote Code Execution
webapps php

Mayur Parmar EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass
webapps multiple

Hardik Solanki Coastercms 5.8.18 - Stored XSS
webapps php

nu11secur1ty Microsoft Windows - Win32k Elevation of Privilege
local windows

Mansoor R WordPress Plugin Wp-FileManager 6.8 - RCE
webapps php CVE-2020-25213

Andrea Intilangelo Mitel mitel-cs018 - Call Data Information Disclosure
remote linux CVE-2003-20001

Alejandro Vazquez Vazquez Ksix Zigbee Devices - Playback Protection Bypass (PoC)
remote multiple

Hardik Solanki DotCMS 20.11 - Stored Cross-Site Scripting
webapps multiple

Shahrukh Iqbal Mirza Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile
webapps multiple CVE-2020-28687

Shahrukh Iqbal Mirza Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork
webapps multiple CVE-2020-28688

Anurag Kumar Employee Record Management System 1.1 - Login Bypass SQL Injection
webapps multiple

Hemant Patidar WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting
webapps php CVE-2020-29469