Florian Gassner 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH)
local windows

Matthew Aberegg Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated)
webapps php

RedTeam Pentesting GmbH FRITZ!Box 7.20 - DNS Rebinding Protection Bypass
remote hardware CVE-2020-26887

Guillaume PETIT Nxlog Community Edition 2.10.2150 - DoS (Poc)
dos multiple CVE-2020-35488

Furkan Göksel Victor CMS 1.0 - Multiple SQL Injection (Authenticated)
webapps php

Andrea Intilangelo PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting)
webapps php CVE-2020-35416

Yilmaz Degirmenci Dolibarr ERP-CRM 12.0.3 - Remote Code Execution (Authenticated)
webapps php

Sagar Banwa Grav CMS 1.6.30 Admin Plugin 1.9.18 - 'Page Title' Persistent Cross-Site Scripting
webapps php

Carter Yagemann libbabl 0.1.62 - Broken Double Free Detection (PoC)
local linux

KeopssGroup0day_Inc Rukovoditel 2.6.1 - Cross-Site Request Forgery (Change password)
webapps php

gx1 Jenkins 2.235.3 - 'X-Forwarded-For' Stored XSS
webapps java CVE-2020-2231

gx1 Jenkins 2.235.3 - 'Description' Stored XSS
webapps java CVE-2020-2230

gx1 Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting
webapps java CVE-2020-2229

Ritesh Gohil Employee Performance Evaluation System 1.0 - 'Task and Description' Persistent Cross Site Scripting
webapps php

Eshan Singh CMS Made Simple 2.2.15 - Stored Cross-Site Scripting via SVG File Upload (Authenticated)
webapps php

Gal Weizman Chromium 83 - Full CSP Bypass
local multiple CVE-2020-6519