KeopssGroup0day_Inc Rukovoditel 2.6.1 - Cross-Site Request Forgery (Change password)
webapps php

gx1 Jenkins 2.235.3 - 'X-Forwarded-For' Stored XSS
webapps java CVE-2020-2231

Zhaiyi Courier Management System 1.0 - 'ref_no' SQL Injection
webapps php

Zhaiyi Courier Management System 1.0 - 'MULTIPART street ((custom) ' SQL Injection
webapps php

Zhaiyi Courier Management System 1.0 - 'First Name' Stored XSS
webapps php

coiffeur Dolibarr 12.0.3 - SQLi to RCE
webapps php

Piyush Malviya Supply Chain Management System - Auth Bypass SQL Injection
webapps php

coiffeur Rukovoditel 2.6.1 - RCE (1)
webapps php CVE-2020-11819

gx1 Jenkins 2.235.3 - 'Description' Stored XSS
webapps java CVE-2020-2230

Saeed Bala Ahmed Medical Center Portal Management System 1.0 - Multiple Stored XSS
webapps php

j5s Openfire 4.6.0 - 'sql' Stored XSS
webapps jsp

j5s Openfire 4.6.0 - 'users' Stored XSS
webapps jsp

j5s Openfire 4.6.0 - 'groupchatJID' Stored XSS
webapps jsp

gx1 Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
webapps java CVE-2020-2229

Ilca Lucian Florin WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting
webapps php

Manish Solanki Library Management System 2.0 - Auth Bypass SQL Injection
webapps php