AppleBois PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting
webapps php CVE-2020-11749

V1n1v131r4 Koken CMS 0.22.24 - Arbitrary File Upload (Authenticated)
webapps php

BKpatron elaniin CMS - Authentication Bypass
webapps php

boku Online Course Registration 1.0 - Unauthenticated Remote Code Execution
webapps php

danf42 Linux/x86 - Egghunter (0x50905090) + sigaction + execve(/bin/sh) Shellcode (35 bytes)
linux_x86

boku LibreHealth 2.0.0 - Authenticated Remote Code Execution
webapps php

James Green Bludit 3.9.2 - Directory Traversal
webapps multiple CVE-2019-16113

Emre ÖVÜNÇ PandoraFMS NG747 7.0 - 'filename' Persistent Cross-Site Scripting
webapps php

KBA@SOGETI_ESEC WordPress Plugin Email Subscribers & Newsletters 4.2.2 - 'hash' SQL Injection (Unauthenticated)
webapps php CVE-2019-20361

KBA@SOGETI_ESEC WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
webapps php CVE-2019-19985

Felipe Winsnes Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service (PoC + SEH Overwrite)
dos windows

Eduard Palisek Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)
local windows

Sarang Tumne Port Forwarding Wizard 4.8.0 - Buffer Overflow (SEH)
local windows

LiquidWorm UBICOD Medivision Digital Signage 1.5.1 - Cross-Site Request Forgery (Add Admin)
webapps hardware

Patrick Hener INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution
webapps multiple CVE-2020-15492

aldorm ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection
webapps java CVE-2016-9488