Andrea Cardaci Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion
webapps php CVE-2020-8866;CVE-2020-8865

Dhiraj Mishra Wing FTP Server - Authenticated CSRF (Delete Admin)
webapps php

Kevin Randall CoreFTP 2.0 Build 674 MDTM - Directory Traversal (Metasploit)
remote windows

Kevin Randall CoreFTP 2.0 Build 674 SIZE - Directory Traversal (Metasploit)
remote windows

Roberto Piña ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
local windows

Andrea Cardaci Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution
webapps php CVE-2020-8518

Amir Hossein Vafifar Persian VIP Download Script 1.0 - 'active' SQL Injection
webapps php CVE-2020-15468

Ahmed Sherif Sysaid 20.1.11 b26 - Remote Command Execution
webapps java

Oscar Flores Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path
local windows

Oscar Flores ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path
local windows

Alejandro Reyes SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
local windows

Alejandro Reyes Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
local windows

piotrflorczyk Microsoft Windows - 'WizardOpium' Local Privilege Escalation
local windows CVE-2019-1458

Olga Villagran RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection
webapps hardware

emaragkos GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
webapps php

Alexandre ZANNI Alfresco 5.2.4 - Persistent Cross-Site Scripting
webapps php CVE-2020-8778;CVE-2020-8777;CVE-2020-8776