[webapps] Oracle Fatwire 6.3 - Multiple Vulnerabilities
Oracle Fatwire 6.3 - Multiple Vulnerabilities
https://www.exploit-db.com/exploits/50167

[webapps] CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50166

[webapps] Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
https://www.exploit-db.com/exploits/50165

[webapps] IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
https://www.exploit-db.com/exploits/50164

[webapps] Laundry Booking Management System 1.0 - 'Multiple' SQL Injection
Laundry Booking Management System 1.0 - 'Multiple' SQL Injection
https://www.exploit-db.com/exploits/50219

[webapps] Online Traffic Offense Management System 1.0 - 'id' SQL Injection (Authenticated)
Online Traffic Offense Management System 1.0 - 'id' SQL Injection (Authenticated)
https://www.exploit-db.com/exploits/50218

[webapps] Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50220

[webapps] Online Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Online Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
https://www.exploit-db.com/exploits/50221

[webapps] Simple Phone book/directory 1.0 - 'Username' SQL Injection (Unauthenticated)
Simple Phone book/directory 1.0 - 'Username' SQL Injection (Unauthenticated)
https://www.exploit-db.com/exploits/50223

[webapps] RaspAP 2.6.6 - Remote Code Execution (RCE) (Authenticated)
RaspAP 2.6.6 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50224

[webapps] WordPress Plugin Mail Masta 1.0 - Local File Inclusion (2)
WordPress Plugin Mail Masta 1.0 - Local File Inclusion (2)
https://www.exploit-db.com/exploits/50226

[webapps] Online Leave Management System 1.0 - Arbitrary File Upload to Shell (Unauthenticated)
Online Leave Management System 1.0 - Arbitrary File Upload to Shell (Unauthenticated)
https://www.exploit-db.com/exploits/50228

[webapps] HP OfficeJet 4630/7110 MYM1FN2025AR/2117A - Stored Cross-Site Scripting (XSS)
HP OfficeJet 4630/7110 MYM1FN2025AR/2117A - Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50227

[webapps] ProcessMaker 3.5.4 - Local File inclusion
ProcessMaker 3.5.4 - Local File inclusion
https://www.exploit-db.com/exploits/50229

[webapps] CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated)
CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50230

[webapps] COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow
COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow
https://www.exploit-db.com/exploits/50232

[webapps] COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow
COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow
https://www.exploit-db.com/exploits/50231

[webapps] ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50233

[webapps] Bus Pass Management System 1.0 - 'viewid' SQL Injection
Bus Pass Management System 1.0 - 'viewid' SQL Injection
https://www.exploit-db.com/exploits/50235

[webapps] Usermin 1.820 - Remote Code Execution (RCE) (Authenticated)
Usermin 1.820 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50234

[local] MySQL User-Defined (Linux) x32 / x86_64 - 'sys_exec' Local Privilege Escalation (2)
MySQL User-Defined (Linux) x32 / x86_64 - 'sys_exec' Local Privilege Escalation (2)
https://www.exploit-db.com/exploits/50236