Rodolfo Tavares Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated)
webapps php CVE-2020-25790

Ünsal Furkan Harani aaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated)
webapps python

Felipe Molina SpamTitan 7.07 - Unauthenticated Remote Code Execution
webapps php CVE-2020-11698

Milad Fadavvi Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution
webapps multiple CVE-2018-17431

Felipe Molina SpamTitan 7.07 - Remote Code Execution (Authenticated)
webapps multiple CVE-2020-11804;CVE-2020-11803;CVE-2020-11700;CVE-2020-11699

Felipe Winsnes Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)
local windows

Mufaddal Masalawala grocy 2.7.1 - Persistent Cross-Site Scripting
webapps php

Dan Duffy Artica Proxy 4.3.0 - Authentication Bypass
webapps hardware CVE-2020-17506

zenofex vBulletin 5.6.2 - 'widget_tabbedContainer_tab_panel' Remote Code Execution
webapps php

ghost_fh pfSense 2.4.4-p3 - Cross-Site Request Forgery
webapps php CVE-2019-16667

danf42 Linux/x86 - Egghunter (0x50905090) + sigaction + execve(/bin/sh) Shellcode (35 bytes)
linux_x86

Felipe Winsnes Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service (PoC + SEH Overwrite)
dos windows

Felipe Winsnes Nidesoft DVD Ripper 5.2.18 - Local Buffer Overflow (SEH)
local windows

François Bibeau TimeClock Software 1.01 0 - (Authenticated) Time-Based SQL Injection
webapps php

Felipe Winsnes FTPDummy 4.80 - Local Buffer Overflow (SEH)
local windows

Amin Sharifi Docsify.js 4.11.4 - Reflective Cross-Site Scripting
webapps multiple CVE-2020-7680