Gabriele Zuddas Gemtek WVRTM-127ACN 01.01.02.141 - Authenticated Arbitrary Command Injection
webapps cgi CVE-2020-24365

Ricardo Longatto Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification
webapps hardware CVE-2018-13382

RedTeam Pentesting GmbH BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
webapps multiple CVE-2020-25820

Gerardo González LCD_Service 1.0.1.0 - 'LCD_Service' Unquote Service Path
local windows

IRVIN GIL KiteService 1.2020.1113.1 - 'KiteService.exe' Unquoted Service Path
local windows

Matthew Aberegg Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection (Authenticated)
webapps php

Jinson Varghese Behanan OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure
webapps php CVE-2020-15478

Sarang Tumne Water Billing System 1.0 - 'username' and 'password' parameters SQL Injection
webapps php

Erick Galindo RealTimes Desktop Service 18.1.4 - 'rpdsvc.exe' Unquoted Service Path
local windows

Paulina Girón Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path
local windows

Erika Figueroa Realtek Audio Service 1.0.0.55 - 'RtkAudioService64.exe' Unquoted Service Path
local windows

Erika Figueroa Realtek Andrea RT Filters 1.0.64.10 - 'AERTSr64.EXE' Unquoted Service Path
local windows

Angel Canseco Motorola Device Manager 2.5.4 - 'ForwardDaemon.exe ' Unquoted Service Path
local windows

Angel Canseco Motorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service Path
local windows

Angel Canseco Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path
local windows

M. Cory Billington SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated)
webapps php CVE-2020-28328