zenofex vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
webapps php

Roel van Beurden CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload
webapps php

Roel van Beurden Fuel CMS 1.4.7 - 'col' SQL Injection (Authenticated)
webapps php

Daniel Bertoni BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path
local windows

Bhadresh Patel ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)
webapps java

boku Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)
webapps php

screetsec Daily Expenses Management System 1.0 - 'item' SQL Injection
webapps php

LiquidWorm All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
webapps hardware

Luis Martínez CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
local windows

screetsec Victor CMS 1.0 - 'Search' SQL Injection
webapps php

Adeeb Shah Stock Management System 1.0 - Authentication Bypass
webapps php

Luis Martínez QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (PoC)
dos windows

MegaMagnus ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC)
dos windows CVE-2020-15956

Daniel Ortiz Daily Expenses Management System 1.0 - 'username' SQL Injection
webapps php

Luis Martínez RTSP for iOS 1.0 - 'IP Address' Denial of Service (PoC)
dos windows

Luis Martínez Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (PoC)
dos windows