Halis Duraki Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass
webapps multiple

Berk Dusunur NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection
webapps multiple

Metasploit WebLogic Server - Deserialization RCE - BadAttributeValueExpException (Metasploit)
remote multiple CVE-2020-2555

Daniel Monzón OpenEDX platform Ironwood 2.5 - Remote Code Execution
webapps multiple CVE-2020-13144

Teppei Fukuda BIND - 'TSIG' Denial of Service
dos multiple CVE-2020-8617

Cody Winkler HP LinuxKI 6.01 - Remote Command Injection
remote multiple CVE-2020-7209

Punt LibreNMS 1.46 - 'search' SQL Injection
webapps multiple

Jasper Lievisse Adriaanse Saltstack 3000.1 - Remote Code Execution
remote multiple CVE-2020-11652;CVE-2020-11651

Metasploit Apache Shiro 1.2.4 - Cookie RememberME Deserial RCE (Metasploit)
remote multiple CVE-2016-4437

Besim EspoCRM 5.8.5 - Privilege Escalation
webapps multiple

Metasploit Apache Solr - Remote Code Execution via Velocity Template (Metasploit)
remote multiple CVE-2019-17558

Gal Weizman WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting
webapps multiple CVE-2019-18426

Mehmet Ince Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit)
webapps multiple

Metasploit IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit)
remote multiple CVE-2019-4716

LiquidWorm FIBARO System Home Center 5.021 - Remote File Include
webapps multiple

LAHBAL Said CyberArk PSMP 10.9.1 - Policy Restriction Bypass
remote multiple