zenofex vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
webapps php

Roel van Beurden CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload
webapps php

Roel van Beurden Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)
webapps php

Bhadresh Patel ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)
webapps java

boku Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)
webapps php

screetsec Daily Expenses Management System 1.0 - 'item' SQL Injection
webapps php

LiquidWorm All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
webapps hardware

screetsec Victor CMS 1.0 - 'Search' SQL Injection
webapps php

Adeeb Shah Stock Management System 1.0 - Authentication Bypass
webapps php

Daniel Ortiz Daily Expenses Management System 1.0 - 'username' SQL Injection
webapps php

Luis Vacacas Pi-hole 4.3.2 - Remote Code Execution (Authenticated)
webapps python CVE-2020-8816

Ahmed Abbas Online Shopping Alphaware 1.0 - Authentication Bypass
webapps php

Jinson Varghese Behanan Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting
webapps php CVE-2020-15038

0xmmnbassel Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion
webapps hardware CVE-2020-3187

0xmmnbassel Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion
webapps hardware CVE-2020-3452

Berk KIRAS eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution
webapps php