Vulnerability-Lab WordPress Plugin Buddypress 6.2.0 - Persistent Cross-Site Scripting
webapps php

Vulnerability-Lab SugarCRM 6.5.18 - Persistent Cross-Site Scripting
webapps php

Ramil Mustafayev Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection
webapps php

Kislay Kumar EgavilanMedia User Registration & Login System with Admin Panel Exploit - SQLi Auth Bypass
webapps php

Mehmet Kelepçe Car Rental Management System 1.0 - 'car_id' Sql Injection
webapps php

Mehmet Kelepçe Car Rental Management System 1.0 - Remote Code Execution (Authenticated)
webapps php

41-trk PMB 5.6 - 'chemin' Local File Disclosure
webapps php

Mayur Parmar User Registration & Login and User Management System 2.1 - Login Bypass SQL Injection
webapps php

Mehmet Kelepçe Water Billing System 1.0 - 'id' SQL Injection (Authenticated)
webapps php

Matthew Aberegg Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection (Authenticated)
webapps php

Sivanesh Ashok October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)
webapps php CVE-2020-5295

Jinson Varghese Behanan OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure
webapps php CVE-2020-15478

Simran Sankhala Touchbase.io 1.10 - Stored Cross Site Scripting
webapps multiple CVE-2020-26218

SunCSR Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
webapps multiple CVE-2020-1938

RAMELLA Sebastien Citrix ADC NetScaler - Local File Inclusion (Metasploit)
webapps hardware

Aporlorxl23 Bludit 3.9.2 - Authentication Bruteforce Bypass (Metasploit)
webapps php