boku Windows/x64 - WinExec Add-Admin (ROOT/I@mR00T$) Dynamic Null-Free Shellcode (210 Bytes)
windows_x86-64

Felipe Winsnes 10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path
local windows

SunCSR LeptonCMS 4.5.0 - Persistent Cross-Site Scripting
webapps php CVE-2020-12707

Roberto Piña AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
local windows

ThelastVvV Joomla! Component GMapFP 3.30 - Arbitrary File Upload
webapps php

Jacob Baines UCM6202 1.0.18.13 - Remote Command Injection
webapps hardware CVE-2020-5722

Víctor García Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
local windows

Jinson Varghese Behanan WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
webapps php CVE-2020-10385

SunCSR UliCMS 2020.1 - Persistent Cross-Site Scripting
webapps php CVE-2020-12704

Upayan Linux/x86 - Reboot + Polymorphic Shellcode (26 bytes)
linux_x86

qw3rTyTy Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection
webapps php

Matthew Aberegg rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
webapps php CVE-2020-10879

LiquidWorm FIBARO System Home Center 5.021 - Remote File Include
webapps multiple

LAHBAL Said CyberArk PSMP 10.9.1 - Policy Restriction Bypass
remote multiple

Milad karimi Wordpress Plugin PicUploader 1.0 - Remote File Upload
webapps php

Cem Onat Karagun Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
dos windows