Metin Yunus Kandemir CSZ CMS 1.2.7 - Persistent Cross-Site Scripting
webapps php

Metasploit Unraid 6.8.0 - Auth Bypass PHP Code Execution (Metasploit)
remote linux CVE-2020-5849;CVE-2020-5847

boku Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path
local windows_x86

bzyo Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)
local windows

Cervoise Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))
local windows

Vulnerability-Lab Fork CMS 5.8.0 - Persistent Cross-Site Scripting
webapps php

Sivanesh Ashok Prestashop 1.7.6.4 - Cross-Site Request Forgery
webapps php

boku Atomic Alarm Clock 6.3 - Stack Overflow (Unicode+SEH)
local windows

Basim Alabdullah Centreon 19.10.5 - 'id' SQL Injection
webapps php

T3jv1l Code Blocks 16.01 - Buffer Overflow (SEH) UNICODE
local windows

Metasploit Nexus Repository Manager - Java EL Injection RCE (Metasploit)
remote linux CVE-2020-10199

Jacob Baines Cisco IP Phone 11.7 - Denial of service (PoC)
dos hardware CVE-2020-3161

Vulnerability-Lab TAO Open Source Assessment Platform 3.3.0 RC02 - HTML Injection
webapps php

Vulnerability-Lab Playable 9.18 iOS - Persistent Cross-Site Scripting
webapps ios

Bailey Belisario Easy MPEG to DVD Burner 1.7.11 - Buffer Overflow (SEH + DEP)
local windows

Metasploit Apache Solr - Remote Code Execution via Velocity Template (Metasploit)
remote multiple CVE-2019-17558