Mehmet Kelepçe Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection
webapps php

Rajivarnan R Zyxel Armor X1 WAP6806 - Directory Traversal
webapps hardware CVE-2020-14461

Metin Yunus Kandemir SuperMicro IPMI WebInterface 03.40 - Cross-Site Request Forgery (Add Admin)
webapps hardware CVE-2020-15046

Mehmet Ince Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 - Remote Code Execution (Metasploit)
webapps multiple CVE-2020-8605

William Summerhill BSA Radar 1.6.7234.24750 - Local File Inclusion
webapps multiple CVE-2020-14946

gh1mau Park Ticketing Management System 1.0 - Authentication Bypass
webapps php

gh1mau Park Ticketing Management System 1.0 - 'viewid' SQL Injection
webapps php

BKpatron Barangay Management System 1.0 - Authentication Bypass
webapps php

bRpsd HelloWeb 2.0 - Arbitrary File Download
webapps asp

th3d1gger Savsoft Quiz 5 - Persistent Cross-Site Scripting
webapps php

mqt Wordpress Plugin Powie's WHOIS Domain Check 0.9.31 - Persistent Cross-Site Scripting
webapps php

William Summerhill BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)
webapps hardware CVE-2020-14944

Metin Yunus Kandemir SuperMicro IPMI 03.40 - Cross-Site Request Forgery (Add Admin)
webapps hardware CVE-2020-15046

hunter gregal PHP 7.4 FFI - 'disable_functions' Bypass
webapps php

Logan Sanderson Exhibitor Web UI 1.7.1 - Remote Code Execution
webapps java CVE-2019-5029

William Summerhill BSA Radar 1.6.7234.24750 - Authenticated Privilege Escalation
webapps multiple CVE-2020-14945