r3m0t3nu11 Bolt CMS 3.7.0 - Authenticated Remote Code Execution
webapps php

Gal Weizman WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting
webapps multiple CVE-2019-18426

Mehmet Ince Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit)
webapps multiple

Matthew Aberegg LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting
webapps php CVE-2020-11456

Basim Alabdullah Pandora FMS 7.0NG - 'net_tools.php' Remote Code Execution
webapps php

Unkn0wn PHP-Fusion 9.03.50 - 'panels.php' Remote Code Execution
webapps php

Jacob Baines Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection
webapps hardware

Jacob Baines Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection
webapps hardware CVE-2020-5726

Cody Sixteen Zen Load Balancer 3.10.1 - Remote Code Execution
webapps cgi

qw3rTyTy Joomla! com_fabrik 3.9.11 - Directory Traversal
webapps php

vikingfr rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
webapps php

hongphukt Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal
webapps java

Mustafa Emre Gül ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Engin Demirbilek Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution
webapps php

SunCSR LeptonCMS 4.5.0 - Persistent Cross-Site Scripting
webapps php CVE-2020-12707

ThelastVvV Joomla! Component GMapFP 3.30 - Arbitrary File Upload
webapps php