Paras Bhatia Code Blocks 17.12 - 'File Name' Local Buffer Overflow (Unicode) (SEH) (PoC)
local windows

BLAY ABU SAFIAN College-Management-System-Php 1.0 - Authentication Bypass
webapps php

Xenofon Vassilakopoulos Linux/x86 - Disable ASLR Security + Polymorphic Shellcode (124 bytes)
linux_x86

boku Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path
local windows

BillyV4 Gila CMS 1.11.8 - 'query' SQL Injection
webapps php CVE-2020-5515

grimm-co Netgear R7000 Router - Remote Code Execution
webapps hardware

Sander Ubink SOS JobScheduler 1.13.3 - Stored Password Decryption
remote multiple CVE-2020-12712

Anurag Srivastava Linux/ARM - Bind (0.0.0.0:1337/TCP) Shell (/bin/sh) + Null-Free Shellcode (100 bytes)
arm 100

Anurag Srivastava Linux/ARM - execve(/bin/dash) Shellcode (32 bytes)
arm

Luca Epifanio Sysax MultiServer 6.90 - Reflected Cross Site Scripting
webapps multiple CVE-2020-13228

hyp3rlinx Avaya IP Office 11 - Password Disclosure
webapps multiple CVE-2020-7030

vvhack.org SmarterMail 16 - Arbitrary File Upload
webapps multiple

Paras Bhatia Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow (SEH) (PoC)
local windows

Mosaaed Virtual Airlines Manager 2.6.2 - 'id' SQL Injection
webapps php

hyp3rlinx WinGate 9.4.1.5998 - Insecure Folder Permissions
local windows CVE-2020-13866

Mehmet Kelepçe Joomla! J2 Store 3.3.11 - 'filter_order_Dir' Authenticated SQL Injection
webapps php