V1n1v131r4 Wing FTP Server 6.3.8 - Remote Code Execution (Authenticated)
webapps lua

ratboy Infor Storefront B2B 1.0 - 'usr_name' SQL Injection
webapps php

KeopssGroup0day_Inc Online Farm Management System 0.1.0 - Persistent Cross-Site Scripting
webapps php

KeopssGroup0day_Inc Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass
webapps php

Rajivarnan R Zyxel Armor X1 WAP6806 - Directory Traversal
webapps hardware CVE-2020-14461

Metin Yunus Kandemir SuperMicro IPMI WebInterface 03.40 - Cross-Site Request Forgery (Add Admin)
webapps hardware CVE-2020-15046

William Summerhill BSA Radar 1.6.7234.24750 - Local File Inclusion
webapps multiple CVE-2020-14946

BKpatron Barangay Management System 1.0 - Authentication Bypass
webapps php

bRpsd HelloWeb 2.0 - Arbitrary File Download
webapps asp

th3d1gger Savsoft Quiz 5 - Persistent Cross-Site Scripting
webapps php

William Summerhill BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)
webapps hardware CVE-2020-14944

Metin Yunus Kandemir SuperMicro IPMI 03.40 - Cross-Site Request Forgery (Add Admin)
webapps hardware CVE-2020-15046

hunter gregal PHP 7.4 FFI - 'disable_functions' Bypass
webapps php

Logan Sanderson Exhibitor Web UI 1.7.1 - Remote Code Execution
webapps java CVE-2019-5029

hyp3rlinx Microsoft Windows mshta.exe 2019 - XML External Entity Injection
remote xml

William Summerhill BSA Radar 1.6.7234.24750 - Authenticated Privilege Escalation
webapps multiple CVE-2020-14945