[webapps] YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48189

[webapps] Sysaid 20.1.11 b26 - Remote Command Execution
Sysaid 20.1.11 b26 - Remote Command Execution
https://www.exploit-db.com/exploits/48188

[local] Counter Strike: GO - '.bsp' Memory Control (PoC)
Counter Strike: GO - '.bsp' Memory Control (PoC)
https://www.exploit-db.com/exploits/48187

[webapps] Persian VIP Download Script 1.0 - 'active' SQL Injection
Persian VIP Download Script 1.0 - 'active' SQL Injection
https://www.exploit-db.com/exploits/48190

[remote] PHPStudy - Backdoor Remote Code execution (Metasploit)
PHPStudy - Backdoor Remote Code execution (Metasploit)
https://www.exploit-db.com/exploits/48192

[remote] Nagios XI - Authenticated Remote Command Execution (Metasploit)
Nagios XI - Authenticated Remote Command Execution (Metasploit)
https://www.exploit-db.com/exploits/48191

[local] ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
https://www.exploit-db.com/exploits/48193

[webapps] Wordpress Plugin Search Meter 2.13.2 - CSV injection
Wordpress Plugin Search Meter 2.13.2 - CSV injection
https://www.exploit-db.com/exploits/48197

[webapps] Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
Wordpress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
https://www.exploit-db.com/exploits/48204

[webapps] WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
https://www.exploit-db.com/exploits/48203

[webapps] Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
https://www.exploit-db.com/exploits/48202

[local] ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path
ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path
https://www.exploit-db.com/exploits/48206

[webapps] HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
https://www.exploit-db.com/exploits/48205

[webapps] rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
https://www.exploit-db.com/exploits/48207

[webapps] rConfig 3.9 - 'searchColumn' SQL Injection
rConfig 3.9 - 'searchColumn' SQL Injection
https://www.exploit-db.com/exploits/48208

[webapps] Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
https://www.exploit-db.com/exploits/48210

[webapps] Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion
Horde Groupware Webmail Edition 5.2.22 - PHP File Inclusion
https://www.exploit-db.com/exploits/48209

[local] AnyBurn 4.8 - Buffer Overflow (SEH)
AnyBurn 4.8 - Buffer Overflow (SEH)
https://www.exploit-db.com/exploits/48211

[webapps] Centos WebPanel 7 - 'term' SQL Injection
Centos WebPanel 7 - 'term' SQL Injection
https://www.exploit-db.com/exploits/48212

[remote] Drobo 5N2 4.1.1 - Remote Command Injection
Drobo 5N2 4.1.1 - Remote Command Injection
https://www.exploit-db.com/exploits/48214