Simran Sankhala Touchbase.io 1.10 - Stored Cross Site Scripting
webapps multiple CVE-2020-26218

SunCSR Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
webapps multiple CVE-2020-1938

RAMELLA Sebastien Citrix ADC NetScaler - Local File Inclusion (Metasploit)
webapps hardware

Aporlorxl23 Bludit 3.9.2 - Authentication Bruteforce Bypass (Metasploit)
webapps php

Abdulazeez Alaseeri Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection
webapps php

Sarang Tumne Water Billing System 1.0 - 'username' and 'password' parameters SQL Injection
webapps php

Fortunato Lodari Car Rental Management System 1.0 - SQL injection + Arbitrary File Upload
webapps php

Philip Holbrook Joplin 1.2.6 - 'link' Cross Site Scripting
webapps multiple CVE-2020-28249

Mohammed Alshehri Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path
local windows

Mohammed Alshehri DiskBoss v11.7.28 - Multiple Services Unquoted Service Path
local windows

Erick Galindo RealTimes Desktop Service 18.1.4 - 'rpdsvc.exe' Unquoted Service Path
local windows

Paulina Girón Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path
local windows

Carlos Roa Canon Inkjet Extended Survey Program 5.1.0.8 - 'IJPLMSVC.EXE' - Unquoted Service Path
local windows

Leslie Lara iDeskService 3.0.2.1 - 'iDeskService' Unquoted Service Path
local windows

SamAlucard Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path
local windows

SamAlucard MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path
local windows