Luis Noriega CMS Made Simple 2.2.14 - Arbitrary File Upload (Authenticated)
webapps php

c0mpu7er Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)
webapps php

George Tsimpidas Mara CMS 7.5 - Reflective Cross-Site Scripting
webapps php CVE-2020-24223

emalp BlazeDVD 7.0 Professional - '.plf' Local Buffer Overflow (SEH_ASLR_DEP)
local windows

Moaaz Taha Online Book Store 1.0 - 'id' SQL Injection
webapps php

LiquidWorm Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation
webapps hardware

SunCSR SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting
webapps php

Jinson Varghese Behanan Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting
webapps multiple

Moaaz Taha Online Shopping Alphaware 1.0 - 'id' SQL Injection
webapps php

SunCSR Team Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)
webapps php

Paras Bhatia ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow (DEP_ASLR Bypass) (PoC)
local windows

elbae Mida eFramework 2.9.0 - Remote Code Execution
webapps multiple CVE-2020-15920

LiquidWorm Eibiz i-Media Server Digital Signage 3.8.0 - Directory Traversal
webapps multiple

hyp3rlinx Ericom Access Server x64 9.2.0 - Server-Side Request Forgery
webapps multiple

LiquidWorm Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure
webapps hardware

LiquidWorm Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass
webapps hardware