China Banking and Insurance Information Technology Management Co. Webtateas 2.0 - Arbitrary File Read
webapps php

MgThuraMoeMyint Windscribe 1.83 - 'WindscribeService' Unquoted Service Path
local windows

Spad Security Group Django 3.0 - Cross-Site Request Forgery Token Bypass
webapps php

Matthew Aberegg pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting
webapps freebsd CVE-2020-11457

Matthew Aberegg LimeSurvey 4.1.11 - 'File Manager' Path Traversal
webapps php CVE-2020-11455

Gal Weizman WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting
webapps multiple CVE-2019-18426

Matthew Aberegg LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting
webapps php CVE-2020-11456

Daniel García Gutiérrez Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation
local windows CVE-2020-0796

vikingfr rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution
webapps php

hongphukt Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal
webapps java

Mustafa Emre Gül ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Engin Demirbilek Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution
webapps php

Víctor García Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
local windows

Jinson Varghese Behanan WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
webapps php CVE-2020-10385

Matthew Aberegg rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
webapps php CVE-2020-10879

Cem Onat Karagun Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
dos windows