[webapps] HiSilicon Video Encoders - Full admin access via backdoor password
HiSilicon Video Encoders - Full admin access via backdoor password
https://www.exploit-db.com/exploits/48902

[webapps] HiSilicon video encoders - RCE via unauthenticated upload of malicious firmware
HiSilicon video encoders - RCE via unauthenticated upload of malicious firmware
https://www.exploit-db.com/exploits/48901

[webapps] Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in
Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in
https://www.exploit-db.com/exploits/48904

[webapps] Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated)
Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated)
https://www.exploit-db.com/exploits/48906

[webapps] Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)
Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)
https://www.exploit-db.com/exploits/48905

[webapps] Textpattern CMS 4.6.2 - Cross-site Request Forgery
Textpattern CMS 4.6.2 - Cross-site Request Forgery
https://www.exploit-db.com/exploits/48907

[webapps] Loan Management System 1.0 - Multiple Cross Site Scripting (Stored)
Loan Management System 1.0 - Multiple Cross Site Scripting (Stored)
https://www.exploit-db.com/exploits/48909

[webapps] Comtrend AR-5387un router - Persistent XSS (Authenticated)
Comtrend AR-5387un router - Persistent XSS (Authenticated)
https://www.exploit-db.com/exploits/48908

[webapps] Wordpress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
Wordpress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
https://www.exploit-db.com/exploits/48910

[webapps] Visitor Management System in PHP 1.0 - SQL Injection (Authenticated)
Visitor Management System in PHP 1.0 - SQL Injection (Authenticated)
https://www.exploit-db.com/exploits/48911

[webapps] Ultimate Project Manager CRM PRO Version 2.0.5 - SQLi (Authenticated)
Ultimate Project Manager CRM PRO Version 2.0.5 - SQLi (Authenticated)
https://www.exploit-db.com/exploits/48912

[webapps] WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload
WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload
https://www.exploit-db.com/exploits/48913

[webapps] User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS
User Registration & Login and User Management System With admin panel 2.1 - Persistent XSS
https://www.exploit-db.com/exploits/48914

[webapps] RiteCMS 2.2.1 - Remote Code Execution (Authenticated)
RiteCMS 2.2.1 - Remote Code Execution (Authenticated)
https://www.exploit-db.com/exploits/48915

[webapps] WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting (Authenticated)
WordPress Plugin Colorbox Lightbox v1.1.1 - Persistent Cross-Site Scripting (Authenticated)
https://www.exploit-db.com/exploits/48919

[webapps] WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection
WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection
https://www.exploit-db.com/exploits/48918

[webapps] Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
https://www.exploit-db.com/exploits/48917

[webapps] Mobile Shop System v1.0 - SQL Injection Authentication Bypass
Mobile Shop System v1.0 - SQL Injection Authentication Bypass
https://www.exploit-db.com/exploits/48916

[webapps] School Faculty Scheduling System 1.0 - Authentication Bypass POC
School Faculty Scheduling System 1.0 - Authentication Bypass POC
https://www.exploit-db.com/exploits/48922

[webapps] School Faculty Scheduling System 1.0 - Stored Cross Site Scripting POC
School Faculty Scheduling System 1.0 - Stored Cross Site Scripting POC
https://www.exploit-db.com/exploits/48921

[webapps] Hrsale 2.0.0 - Local File Inclusion
Hrsale 2.0.0 - Local File Inclusion
https://www.exploit-db.com/exploits/48920