[webapps] Online Voting System 1.0 - SQLi (Authentication Bypass) + Remote Code Execution (RCE)
Online Voting System 1.0 - SQLi (Authentication Bypass) + Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50088

[webapps] OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) (2)
OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) (2)
https://www.exploit-db.com/exploits/50087

[webapps] WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS)
WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50086

[webapps] Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)
Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)
https://www.exploit-db.com/exploits/50085

[webapps] Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)
Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)
https://www.exploit-db.com/exploits/50084

[local] WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control
WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control
https://www.exploit-db.com/exploits/50083

[webapps] Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)
Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)
https://www.exploit-db.com/exploits/50082

[webapps] b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF)
https://www.exploit-db.com/exploits/50081

[webapps] AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)
AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50080

[webapps] Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)
Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)
https://www.exploit-db.com/exploits/50079

[webapps] Vianeos OctoPUS 5 - 'login_user' SQLi
Vianeos OctoPUS 5 - 'login_user' SQLi
https://www.exploit-db.com/exploits/50078

[webapps] Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)
Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)
https://www.exploit-db.com/exploits/50077

[webapps] Online Voting System 1.0 - Remote Code Execution (Authenticated)
Online Voting System 1.0 - Remote Code Execution (Authenticated)
https://www.exploit-db.com/exploits/50076

[webapps] Online Voting System 1.0 - Authentication Bypass (SQLi)
Online Voting System 1.0 - Authentication Bypass (SQLi)
https://www.exploit-db.com/exploits/50075

[webapps] Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass)
Doctors Patients Management System 1.0 - SQL Injection (Authentication Bypass)
https://www.exploit-db.com/exploits/50074

[webapps] Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
Simple Traffic Offense System 1.0 - Stored Cross Site Scripting (XSS)
https://www.exploit-db.com/exploits/50073

[webapps] Apache Superset 1.1.0 - Time-Based Account Enumeration
Apache Superset 1.1.0 - Time-Based Account Enumeration
https://www.exploit-db.com/exploits/50072

[webapps] phpAbook 0.9i - SQL Injection
phpAbook 0.9i - SQL Injection
https://www.exploit-db.com/exploits/50071

[remote] ES File Explorer 4.1.9.7.4 - Arbitrary File Read
ES File Explorer 4.1.9.7.4 - Arbitrary File Read
https://www.exploit-db.com/exploits/50070

[webapps] Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
https://www.exploit-db.com/exploits/50069