Grimm VMWare Fusion - Local Privilege Escalation
local macos

Miguel Mendez Z Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)
webapps asp

vikingfr rConfig 3.9 - 'searchColumn' SQL Injection
webapps php CVE-2020-10220

Engin Demirbilek rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
webapps php CVE-2020-10221

RedTeam Pentesting GmbH WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
webapps java

NgoAnhDuc UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read
webapps php

Olga Villagran RICOH Aficio SP 5210SF Printer - 'entryNameIn' HTML Injection
webapps hardware

emaragkos GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection
webapps php

Paulina Girón RICOH Aficio SP 5200S Printer - 'entryNameIn' HTML Injection
webapps hardware

Jinson Varghese Behanan WordPress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
webapps php CVE-2020-8615

GeekHack Magento WooCommerce CardGate Payment Gateway 2.0.30 - Payment Process Bypass
webapps php

GeekHack WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass
webapps php CVE-2020-8819

Scott Goodwin ManageEngine EventLog Analyzer 10.0 - Information Disclosure
webapps java CVE-2019-19774

emaragkos GUnet OpenEclass E-learning platform 1.7.3 - 'uname' SQL Injection
webapps php

Scott Goodwin Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting
webapps hardware CVE-2019-7004

byteGoblin Nanometrics Centaur 4.3.23 - Unauthenticated Remote Memory Leak
webapps hardware