0xd0ff9 AirControl 1.4.2 - PreAuth Remote Code Execution
webapps hardware

Kailash Bohara OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)
webapps php CVE-2020-10596

BKpatron Clinic Management System 1.0 - Authentication Bypass
webapps php

s1gh QuickBox Pro 2.1.8 - Authenticated Remote Code Execution
webapps php CVE-2020-13448

Photubias VMware vCenter Server 6.7 - Authentication Bypass
webapps multiple CVE-2020-3952

Raphael Karger WordPress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation
webapps php CVE-2020-13693

Halis Duraki Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass
webapps multiple

UnD3sc0n0c1d0 WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
webapps php

Th3GundY QNAP QTS and Photo Station 6.0.3 - Remote Command Execution
webapps php

China Banking and Insurance Information Technology Management Co. EyouCMS 1.4.6 - Persistent Cross-Site Scripting
webapps php

Berk Dusunur Online-Exam-System 2015 - 'fid' SQL Injection
webapps php

Berk Dusunur NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection
webapps multiple

VulnSpy OXID eShop 6.3.4 - 'sorting' SQL Injection
webapps php

China Banking and Insurance Information Technology Management Co. Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting
webapps php

Matthew Aberegg osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
webapps php

Matthew Aberegg osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
webapps php