Amir Hossein Vafifar Persian VIP Download Script 1.0 - 'active' SQL Injection
webapps php CVE-2020-15468

En_dust YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
webapps php

Ahmed Sherif Sysaid 20.1.11 b26 - Remote Command Execution
webapps java

minhnb Sentrifugo HRMS 3.2 - 'id' SQL Injection
webapps php

Unkn0wn 60CycleCMS - 'news.php' SQL Injection
webapps php

NgoAnhDuc UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read
webapps php

Olga Villagran RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection
webapps hardware

emaragkos GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
webapps php

Alexandre ZANNI Alfresco 5.2.4 - Persistent Cross-Site Scripting
webapps php CVE-2020-8778;CVE-2020-8777;CVE-2020-8776

Paulina Girón RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection
webapps hardware

Lucas Amorim Cacti v1.2.8 - Unauthenticated Remote Code Execution (Metasploit)
webapps php

Elber Tavares Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)
webapps hardware CVE-2019-19142

Elber Tavares TP LINK TL-WR849N - Remote Code Execution
webapps hardware CVE-2020-9374

Cary Hooper Wing FTP Server 6.2.5 - Privilege Escalation
webapps multiple

Elber Tavares TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)
webapps hardware CVE-2019-19143

Jinson Varghese Behanan WordPress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
webapps php CVE-2020-8615