[webapps] Gym Management System 1.0 - Unauthenticated Remote Code Execution
Gym Management System 1.0 - Unauthenticated Remote Code Execution
https://www.exploit-db.com/exploits/48506

[local] Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
https://www.exploit-db.com/exploits/48505

[remote] WebLogic Server - Deserialization RCE - BadAttributeValueExpException (Metasploit)
WebLogic Server - Deserialization RCE - BadAttributeValueExpException (Metasploit)
https://www.exploit-db.com/exploits/48508

[webapps] Wordpress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)
Wordpress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)
https://www.exploit-db.com/exploits/48509

[webapps] Online Discussion Forum Site 1.0 - Remote Code Execution
Online Discussion Forum Site 1.0 - Remote Code Execution
https://www.exploit-db.com/exploits/48512

[webapps] Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting
Victor CMS 1.0 - 'add_user' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48511

[local] GoldWave - Buffer Overflow (SEH Unicode)
GoldWave - Buffer Overflow (SEH Unicode)
https://www.exploit-db.com/exploits/48510

[remote] Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
https://www.exploit-db.com/exploits/48514

[remote] Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
https://www.exploit-db.com/exploits/48513

[webapps] Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
https://www.exploit-db.com/exploits/48516

[webapps] OpenEMR 5.0.1 - Remote Code Execution
OpenEMR 5.0.1 - Remote Code Execution
https://www.exploit-db.com/exploits/48515

[webapps] Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
https://www.exploit-db.com/exploits/48518

[local] StreamRipper32 2.6 - Buffer Overflow (PoC)
StreamRipper32 2.6 - Buffer Overflow (PoC)
https://www.exploit-db.com/exploits/48517

[webapps] WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
https://www.exploit-db.com/exploits/48520

[webapps] Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
https://www.exploit-db.com/exploits/48519

[dos] BIND - 'TSIG' Denial of Service
BIND - 'TSIG' Denial of Service
https://www.exploit-db.com/exploits/48521

[webapps] Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting
Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48526

[webapps] osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48525

[webapps] osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48524

[webapps] LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting
LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48523