Elias Issa Netis WF2419 2.2.36123 - Remote Code Execution
webapps hardware

Andrey Stoykov Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)
local windows

Javier Olmedo Joplin Desktop 1.0.184 - Cross-Site Scripting
webapps multiple CVE-2020-9038

Tobin Shields qdPM < 9.1 - Remote Code Execution
webapps multiple CVE-2020-7246

Raki Ben Hamouda Comtrend VR-3033 - Command Injection
webapps hardware CVE-2020-10173

Meisam Monsef Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Qualys Corporation OpenSMTPD < 6.6.3p1 - Local Privilege Escalation + Remote Code Execution
remote openbsd CVE-2020-8794

Qualys Corporation OpenSMTPD 6.6.3 - Arbitrary File Read
remote linux CVE-2020-8793

indoushka PhpIX 2012 Professional - 'id' SQL Injection
webapps php

Ismael Nava Core FTP LE 2.2 - Denial of Service (PoC)
dos windows

berat isler Odin Secure FTP Expert 7.6.3 - Denial of Service (PoC)
dos windows

GeekHack Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass
webapps php

GeekHack WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass
webapps php CVE-2020-8819

Ismael Nava aSc TimeTables 2020.11.4 - Denial of Service (PoC)
dos windows

Ismael Nava SpotFTP-FTP Password Recover 2.4.8 - Denial of Service (PoC)
dos windows

Metasploit Diamorphine Rootkit - Signal Privilege Escalation (Metasploit)
local linux