[remote] Apache APISIX 2.12.1 - Remote Code Execution (RCE)
Apache APISIX 2.12.1 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50829

[webapps] Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)
Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)
https://www.exploit-db.com/exploits/50830

[webapps] ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Takeover
ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Takeover
https://www.exploit-db.com/exploits/50831

[remote] Ivanti Endpoint Manager 4.6 - Remote Code Execution (RCE)
Ivanti Endpoint Manager 4.6 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50833

[remote] iRZ Mobile Router - CSRF to RCE
iRZ Mobile Router - CSRF to RCE
https://www.exploit-db.com/exploits/50832

[remote] ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure
ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure
https://www.exploit-db.com/exploits/50836

[remote] ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting (XSS)
ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50835

[local] Sysax FTP Automation 6.9.0 - Privilege Escalation
Sysax FTP Automation 6.9.0 - Privilege Escalation
https://www.exploit-db.com/exploits/50834

[local] ProtonVPN 1.26.0 - Unquoted Service Path
ProtonVPN 1.26.0 - Unquoted Service Path
https://www.exploit-db.com/exploits/50837

[webapps] WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read - Unauthenticated
WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read - Unauthenticated
https://www.exploit-db.com/exploits/50838

[webapps] ImpressCMS 1.4.2 - Remote Code Execution (RCE)
ImpressCMS 1.4.2 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50839

[webapps] WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)
WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)
https://www.exploit-db.com/exploits/50842

[webapps] Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)
Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)
https://www.exploit-db.com/exploits/50841

[webapps] Atom CMS 2.0 - Remote Code Execution (RCE)
Atom CMS 2.0 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50840

[webapps] WordPress Plugin admin-word-count-column 2.2 - Local File Read
WordPress Plugin admin-word-count-column 2.2 - Local File Read
https://www.exploit-db.com/exploits/50845

[webapps] WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion
WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion
https://www.exploit-db.com/exploits/50844

[webapps] WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion
WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion
https://www.exploit-db.com/exploits/50843

[webapps] WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS
WordPress Plugin Easy Cookie Policy 1.6.2 - Broken Access Control to Stored XSS
https://www.exploit-db.com/exploits/50849

[remote] Kramer VIAware 2.5.0719.1034 - Remote Code Execution (RCE)
Kramer VIAware 2.5.0719.1034 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50848

[remote] PostgreSQL 9.3-11.7 - Remote Code Execution (RCE) (Authenticated)
PostgreSQL 9.3-11.7 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50847

[webapps] CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)
CSZ CMS 1.2.9 - 'Multiple' Blind SQLi(Authenticated)
https://www.exploit-db.com/exploits/50846