[webapps] XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting
XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/46424

[webapps] eDirectory - SQL Injection
eDirectory - SQL Injection
https://www.exploit-db.com/exploits/46423

[dos] BulletProof FTP Server 2019.0.0.50 - 'SMTP Server' Denial of Service (PoC)
BulletProof FTP Server 2019.0.0.50 - 'SMTP Server' Denial of Service (PoC)
https://www.exploit-db.com/exploits/46422

[dos] Valentina Studio 9.0.4 - 'Host' Denial of Service (PoC)
Valentina Studio 9.0.4 - 'Host' Denial of Service (PoC)
https://www.exploit-db.com/exploits/46421

[webapps] Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-Site Scripting
Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/46420

[webapps] Listing Hub CMS 1.0 - 'pages.php id' SQL Injection
Listing Hub CMS 1.0 - 'pages.php id' SQL Injection
https://www.exploit-db.com/exploits/46419

[webapps] Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection
Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection
https://www.exploit-db.com/exploits/46418

[dos] NetSetMan 4.7.1 - 'Workgroup' Denial of Service (PoC)
NetSetMan 4.7.1 - 'Workgroup' Denial of Service (PoC)
https://www.exploit-db.com/exploits/46417

[local] MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation
https://www.exploit-db.com/exploits/46416

[papers] The Ultimate Guide For Subdomain Takeover with Practical
The Ultimate Guide For Subdomain Takeover with Practical
https://www.exploit-db.com/docs/english/46415-the-ultimate-guide-for-subdomain-takeover-with-practical.pdf

[webapps] WordPress Plugin WooCommerce - GloBee (cryptocurrency) Payment Gateway 1.1.1 - Payment Bypass / Unauthorized Order Status Spoofing
WordPress Plugin WooCommerce - GloBee (cryptocurrency) Payment Gateway 1.1.1 - Payment Bypass / Unauthorized Order Status Spoofing
https://www.exploit-db.com/exploits/46414

[webapps] Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution
Drupal < 8.6.10 / < 8.5.11 - REST Module Remote Code Execution
https://www.exploit-db.com/exploits/46452

[webapps] Teracue ENC-400 - Command Injection / Missing Authentication
Teracue ENC-400 - Command Injection / Missing Authentication
https://www.exploit-db.com/exploits/46451

[webapps] Micro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege Escalation
Micro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege Escalation
https://www.exploit-db.com/exploits/46450

[remote] Nuuo Central Management - Authenticated SQL Server SQL Injection (Metasploit)
Nuuo Central Management - Authenticated SQL Server SQL Injection (Metasploit)
https://www.exploit-db.com/exploits/46449

[dos] WebKit JSC - reifyStaticProperty Needs to set the PropertyAttribute::CustomAccessor flag for CustomGetterSetter
WebKit JSC - reifyStaticProperty Needs to set the PropertyAttribute::CustomAccessor flag for CustomGetterSetter
https://www.exploit-db.com/exploits/46448

[papers] Protecting Windows Privilege Accounts
Protecting Windows Privilege Accounts
https://www.exploit-db.com/docs/english/46447-protecting-windows-privilege-accounts.pdf

[webapps] Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Execution
Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Execution
https://www.exploit-db.com/exploits/46446

[dos] AirDrop 2.0 - Denial of Service (DoS)
AirDrop 2.0 - Denial of Service (DoS)
https://www.exploit-db.com/exploits/46445

[remote] MikroTik RouterOS < 6.43.12 (stable) / < 6.42.12 (long-term) - Firewall and NAT Bypass
MikroTik RouterOS < 6.43.12 (stable) / < 6.42.12 (long-term) - Firewall and NAT Bypass
https://www.exploit-db.com/exploits/46444