Ismael Nava Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path
local windows

Pruthvi Nekkanti Cyber Cafe Management System Project (CCMS) 1.0 - Persistent Cross-Site Scripting
webapps php

Mohammed Alshehri Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
local windows

Shwetabh Vishnoi Zabbix 5.0.0 - Stored XSS via URL Widget Iframe
webapps php

Eshan Singh CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
webapps php

iqzer0 Laravel Nova 3.7.0 - 'range' DoS
webapps php

Hemant Patidar Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
webapps php

Dhruv Patel Savsoft Quiz 5 - 'field_title' Stored Cross-Site Scripting
webapps php

Gal Weizman Chromium 83 - Full CSP Bypass
local multiple CVE-2020-6519

Ultra Security Team Testa Online Test Management System 3.4.7 - 'q' SQL Injection
webapps multiple

yudp MiniCMS 1.10 - 'content box' Stored XSS
webapps php

KeopssGroup0day_Inc Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection
webapps multiple

Diego Cañada IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path
local windows

Parshwa Bhavsar Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting
webapps php

Pankaj Verma Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)
webapps multiple CVE-2020-28976;CVE-2020-28977;CVE-2020-28978

Hemant Patidar Invision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
webapps multiple CVE-2020-29477