qw3rTyTy Joomla! Component ACYMAILING 3.9.0 - Unauthenticated Arbitrary File Upload
webapps php

FarazPajohan Microtik SSH Daemon 6.44.3 - Denial of Service (PoC)
dos hardware

shellord Netlink GPON Router 1.0.11 - Remote Code Execution
webapps hardware

Grimm VMWare Fusion - Local Privilege Escalation
local macos

n4pst3r UADMIN Botnet 1.0 - 'link' SQL Injection
webapps php

eerykitty Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)
dos windows CVE-2020-0796

Ian Sindermann Drobo 5N2 4.1.1 - Remote Command Injection
remote hardware

Nawaf Alkeraithe WordPress Plugin Custom Searchable Data System - Unauthenticated Data M]odification
webapps php

Berke YILMAZ Centos WebPanel 7 - 'term' SQL Injection
webapps linux CVE-2020-10230

Richard Davy AnyBurn 4.8 - Buffer Overflow (SEH)
local windows

vikingfr rConfig 3.9 - 'searchColumn' SQL Injection
webapps php CVE-2020-10220

Engin Demirbilek rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
webapps php CVE-2020-10221

Roberto Piña ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path
local windows

RedTeam Pentesting GmbH WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
webapps java

Milad karimi Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
webapps php

Andrea Cardaci Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
webapps php CVE-2020-8866;CVE-2020-8865