Iridium Piwigo 2.10.1 - Cross Site Scripting
webapps php CVE-2020-9467

Jok3r Pearson Vue VTS 2.3.1911 Installer - 'VUEApplicationWrapper' Unquoted Service Path
local windows

Jonatan Schor RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)
webapps hardware CVE-2020-13259

LiquidWorm Rapid7 Nexpose Installer 6.6.39 - 'nexposeengine' Unquoted Service Path
local windows

Jonatan Schor RAD SecFlow-1v SF_0290_2.3.01.26 - Persistent Cross-Site Scripting
webapps hardware CVE-2020-13260

Marco Ruela VTENEXT 19 CE - Remote Code Execution
webapps multiple

Cody Winkler Gnome Fonts Viewer 3.34.0 - Heap Corruption
local linux

Hritik Vijay ZTE Router F602W - Captcha Bypass
webapps hardware CVE-2020-6862

V1n1v131r4 Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)
webapps java

alacerda ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path
local windows

Hodorsec ManageEngine Applications Manager 14700 - Remote Code Execution (Authenticated)
webapps java CVE-2020-14008

Abhiram V Cabot 0.11.12 - Persistent Cross-Site Scripting
webapps multiple

V1n1v131r4 SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
webapps php

BKpatron BloodX CMS 1.0 - Authentication Bypass
webapps php

Hemant Patidar Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting
webapps php CVE-2020-24609

Abdulkadir Kaya moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)
webapps php