[webapps] GigToDo 1.3 - Cross-Site Scripting
GigToDo 1.3 - Cross-Site Scripting
https://www.exploit-db.com/exploits/47185

[webapps] WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting
WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting
https://www.exploit-db.com/exploits/47184

[remote] WP Database Backup < 5.2 - Remote Code Execution (Metasploit)
WP Database Backup < 5.2 - Remote Code Execution (Metasploit)
https://www.exploit-db.com/exploits/47187

[remote] Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)
Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)
https://www.exploit-db.com/exploits/47186

[webapps] Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
https://www.exploit-db.com/exploits/47188

[dos] macOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles
macOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles
https://www.exploit-db.com/exploits/47191

[dos] macOS / iOS JavaScriptCore - Loop-Invariant Code Motion (LICM) Leaves Object Property Access Unguarded
macOS / iOS JavaScriptCore - Loop-Invariant Code Motion (LICM) Leaves Object Property Access Unguarded
https://www.exploit-db.com/exploits/47190

[dos] iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
https://www.exploit-db.com/exploits/47194

[dos] iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1
iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1
https://www.exploit-db.com/exploits/47193

[dos] iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References
iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References
https://www.exploit-db.com/exploits/47192

[dos] macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances
macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances
https://www.exploit-db.com/exploits/47189

[remote] Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)
Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)
https://www.exploit-db.com/exploits/47195

[webapps] Oracle Hyperion Planning 11.1.2.3 - XML External Entity
Oracle Hyperion Planning 11.1.2.3 - XML External Entity
https://www.exploit-db.com/exploits/47196

[webapps] WebIncorp ERP - SQL injection
WebIncorp ERP - SQL injection
https://www.exploit-db.com/exploits/47199

[webapps] Ultimate Loan Manager 2.0 - Cross-Site Scripting
Ultimate Loan Manager 2.0 - Cross-Site Scripting
https://www.exploit-db.com/exploits/47198

[webapps] Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery
Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery
https://www.exploit-db.com/exploits/47203

[webapps] Sar2HTML 3.2.1 - Remote Command Execution
Sar2HTML 3.2.1 - Remote Command Execution
https://www.exploit-db.com/exploits/47204

[webapps] 1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/47206

[webapps] Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
https://www.exploit-db.com/exploits/47205

[remote] Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
https://www.exploit-db.com/exploits/47208