Photubias Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
webapps linux CVE-2020-11108

Mehmet Kelepçe Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
webapps php

Andy Bowden StreamRipper32 2.6 - Buffer Overflow (PoC)
local windows

Kamaljeet Kumar Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
webapps php CVE-2020-12261

Musyoka Ian OpenEMR 5.0.1 - Remote Code Execution (1)
webapps php

Metasploit Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
remote hardware CVE-2017-15889

Metasploit Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
remote windows CVE-2020-13166

Enesdex Online Discussion Forum Site 1.0 - Remote Code Execution
webapps php

Nitya Nand Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting
webapps php

Andy Bowden GoldWave - Buffer Overflow (SEH Unicode)
local windows

SunCSR WordPress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)
webapps php

Metasploit WebLogic Server - Deserialization RCE - BadAttributeValueExpException (Metasploit)
remote multiple CVE-2020-2555

Gobinathan VUPlayer 2.49 .m3u - Local Buffer Overflow (DEP_ASLR)
local windows

boku Gym Management System 1.0 - Unauthenticated Remote Code Execution
webapps php

Matteo Malvica Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
local windows CVE-2020-5752

Mehmet Kelepçe Dolibarr 11.0.3 - Persistent Cross-Site Scripting
webapps php