Sarang Tumne Avaya Aura Communication Manager 5.2 - Remote Code Execution
webapps hardware

Jinson Varghese Behanan WordPress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting
webapps php

Engin Demirbilek PANDORAFMS 7.0 - Authenticated Remote Code Execution
webapps php CVE-2020-8947

Google Security Research iOS/macOS - Out-of-Bounds Timestamp Write in IOAccelCommandQueue2::processSegmentKernelCommand()
dos multiple CVE-2020-3837

Google Security Research usersctp - Out-of-Bounds Reads in sctp_load_addresses_from_init
dos linux

Bogdan Kurinnoy Dota 2 7.23f - Denial of Service (PoC)
dos windows CVE-2020-7949

Jinson Varghese Behanan WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting
webapps php CVE-2020-7108

Trent Gordon ExpertGPS 6.38 - XML External Entity Injection
webapps xml

vikingfr rConfig 3.9.3 - Authenticated Remote Code Execution
webapps php CVE-2019-19509

Google Security Research macOS/iOS ImageIO - Heap Corruption when Processing Malformed TIFF Image
dos multiple

Greg.Priest Webtareas 2.0 - 'id' SQL Injection
webapps php 80

pentagrid Ricoh Printer Drivers - Local Privilege Escalation
local windows CVE-2019-19363

Mustafa Emre Gül KeePass 2.44 - Denial of Service (PoC)
dos multiple

Ertebat Gostar Co ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection
webapps java 80

TheCyberGeek Centreon 19.04 - Authenticated Remote Code Execution (Metasploit)
webapps php CVE-2019-16405

Raphael Karger WordPress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass
webapps php