Julien Ahrens Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF
webapps multiple CVE-2020-16171

Xavi Beltran Laravel Administrator 4 - Unrestricted File Upload (Authenticated)
webapps php CVE-2020-10963

Emre SUREN Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution
webapps hardware

Sun* Cyber Security Research Team WonderCMS 3.1.3 - 'uploadFile' Stored Cross-Site Scripting
webapps php

Ilca Lucian Florin Wordpress Theme Wibar 1.1.8 - 'Brand Component' Stored Cross Site Scripting
webapps php

Abdessalam king SyncBreeze 10.0.28 - 'password' Remote Buffer Overflow
webapps windows

Emre Aslan osCommerce 2.3.4.1 - 'title' Persistent Cross-Site Scripting
webapps php

Mayur Parmar WonderCMS 3.1.3 - 'page' Persistent Cross-Site Scripting
webapps php

Hemant Patidar OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting
webapps php CVE-2020-29470

Hemant Patidar OpenCart 3.0.3.6 - 'Profile Image' Stored Cross-Site Scripting (Authenticated)
webapps php CVE-2020-29471

maj0rmil4d Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated)
webapps hardware

Giuseppe Fuggiano ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit)
webapps linux CVE-2019-12725

SunCSR Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service
webapps multiple CVE-2020-13951

Hemant Patidar nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting
webapps multiple CVE-2020-29475

malwrforensics TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass
webapps hardware CVE-2020-24363

3ndG4me LifeRay 7.2.1 GA2 - Stored XSS
webapps multiple CVE-2020-7934