[webapps] HP OfficeJet 4630/7110 MYM1FN2025AR/2117A - Stored Cross-Site Scripting (XSS)
HP OfficeJet 4630/7110 MYM1FN2025AR/2117A - Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50227

[webapps] ProcessMaker 3.5.4 - Local File inclusion
ProcessMaker 3.5.4 - Local File inclusion
https://www.exploit-db.com/exploits/50229

[webapps] CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated)
CyberPanel 2.1 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50230

[webapps] COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow
COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow
https://www.exploit-db.com/exploits/50232

[webapps] COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow
COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow
https://www.exploit-db.com/exploits/50231

[webapps] ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50233

[webapps] Bus Pass Management System 1.0 - 'viewid' SQL Injection
Bus Pass Management System 1.0 - 'viewid' SQL Injection
https://www.exploit-db.com/exploits/50235

[webapps] Usermin 1.820 - Remote Code Execution (RCE) (Authenticated)
Usermin 1.820 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50234

[local] MySQL User-Defined (Linux) x32 / x86_64 - 'sys_exec' Local Privilege Escalation (2)
MySQL User-Defined (Linux) x32 / x86_64 - 'sys_exec' Local Privilege Escalation (2)
https://www.exploit-db.com/exploits/50236

[webapps] Projectsend r1295 - 'name' Stored XSS
Projectsend r1295 - 'name' Stored XSS
https://www.exploit-db.com/exploits/50240

[webapps] Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution (RCE) (Unauthenticated)
Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution (RCE) (Unauthenticated)
https://www.exploit-db.com/exploits/50239

[webapps] Strapi 3.0.0-beta.17.7 - Remote Code Execution (RCE) (Authenticated)
Strapi 3.0.0-beta.17.7 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50238

[webapps] Strapi 3.0.0-beta - Set Password (Unauthenticated)
Strapi 3.0.0-beta - Set Password (Unauthenticated)
https://www.exploit-db.com/exploits/50237

[webapps] Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write (Authenticated)
Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write (Authenticated)
https://www.exploit-db.com/exploits/50241

[webapps] WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated)
WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated)
https://www.exploit-db.com/exploits/50242

[webapps] Traffic Offense Management System 1.0 - SQLi to Remote Code Execution (RCE) (Unauthenticated)
Traffic Offense Management System 1.0 - SQLi to Remote Code Execution (RCE) (Unauthenticated)
https://www.exploit-db.com/exploits/50244

[webapps] Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated)
Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated)
https://www.exploit-db.com/exploits/50243

[webapps] WordPress Plugin Payments Plugin | GetPaid 2.4.6 - HTML Injection
WordPress Plugin Payments Plugin | GetPaid 2.4.6 - HTML Injection
https://www.exploit-db.com/exploits/50246

[dos] Telegram Desktop 2.9.2 - Denial of Service (PoC)
Telegram Desktop 2.9.2 - Denial of Service (PoC)
https://www.exploit-db.com/exploits/50247

[webapps] Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated)
Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated)
https://www.exploit-db.com/exploits/50251