AkkuS Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit)
webapps linux CVE-2020-35606

SunCSR Team WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)
webapps php

Kislay Kumar Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS
webapps php

Kislay Kumar Library Management System 3.0 - _Add Category_ Stored XSS
webapps php

Musyoka Ian CSE Bookstore 1.0 - Multiple SQL Injection
webapps php

Matthew Aberegg Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated)
webapps php

Mosaaed Victor CMS 1.0 - File Upload To RCE
webapps php

Raffaele Sabato Online Marriage Registration System 1.0 - 'searchdata' SQL Injection
webapps php CVE-2020-35151

Saeed Bala Ahmed Point of Sale System 1.0 - Multiple Stored XSS
webapps php

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS
webapps multiple CVE-2020-20139

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS
webapps multiple CVE-2020-20142

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS
webapps multiple CVE-2020-20141

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS
webapps multiple CVE-2020-20140

Ramikan SCO Openserver 5.0.7 - 'outputform' Command Injection
webapps sco CVE-2020-25494

Ramikan SCO Openserver 5.0.7 - 'section' Reflected XSS
webapps sco CVE-2020-25495

Ramikan Spiceworks 7.5 - HTTP Header Injection
webapps windows CVE-2020-25901