1F98D TeamCity Agent XML-RPC 10.0 - Remote Code Execution
webapps php

Dhiraj Mishra Wing FTP Server - Authenticated CSRF (Delete Admin)
webapps php

Touhid M.Shaikh PlaySMS 1.4.3 - Template Injection / Remote Code Execution
webapps php

i4bdullah Joomla! 3.9.0 < 3.9.7 - CSV Injection
webapps php CVE-2019-12765

Daniel Monzón WordPress Plugin Search Meter 2.13.2 - CSV injection
webapps php

AkkuS CTROMS Terminal OS Port Portal - 'Password Reset' Authentication Bypass (Metasploit)
remote linux CVE-2020-14930

Kevin Randall CoreFTP 2.0 Build 674 MDTM - Directory Traversal (Metasploit)
remote windows

Kevin Randall CoreFTP 2.0 Build 674 SIZE - Directory Traversal (Metasploit)
remote windows

Roberto Piña ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
local windows

Andrea Cardaci Horde Groupware Webmail Edition 5.2.22 - Remote Code Execution
webapps php CVE-2020-8518

Metasploit PHPStudy - Backdoor Remote Code execution (Metasploit)
remote php

Metasploit Nagios XI - Authenticated Remote Command Execution (Metasploit)
remote linux CVE-2019-15949

Amir Hossein Vafifar Persian VIP Download Script 1.0 - 'active' SQL Injection
webapps php CVE-2020-15468

En_dust YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
webapps php

Ahmed Sherif Sysaid 20.1.11 b26 - Remote Command Execution
webapps java

0day enthusiast Counter Strike: GO - '.bsp' Memory Control (PoC)
local multiple