[remote] Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
https://www.exploit-db.com/exploits/48514

[remote] Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
https://www.exploit-db.com/exploits/48513

[webapps] Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
Open-AudIT 3.3.0 - Reflective Cross-Site Scripting (Authenticated)
https://www.exploit-db.com/exploits/48516

[webapps] OpenEMR 5.0.1 - Remote Code Execution
OpenEMR 5.0.1 - Remote Code Execution
https://www.exploit-db.com/exploits/48515

[webapps] Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)
https://www.exploit-db.com/exploits/48518

[local] StreamRipper32 2.6 - Buffer Overflow (PoC)
StreamRipper32 2.6 - Buffer Overflow (PoC)
https://www.exploit-db.com/exploits/48517

[webapps] WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
WordPress Plugin Drag and Drop File Upload Contact Form 1.3.3.2 - Remote Code Execution
https://www.exploit-db.com/exploits/48520

[webapps] Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
https://www.exploit-db.com/exploits/48519

[dos] BIND - 'TSIG' Denial of Service
BIND - 'TSIG' Denial of Service
https://www.exploit-db.com/exploits/48521

[webapps] Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting
Kuicms PHP EE 2.0 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48526

[webapps] osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
osTicket 1.14.1 - 'Saved Search' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48525

[webapps] osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
osTicket 1.14.1 - 'Ticket Queue' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48524

[webapps] LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting
LimeSurvey 4.1.11 - 'Permission Roles' Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48523

[webapps] Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting
Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48522

[webapps] OXID eShop 6.3.4 - 'sorting' SQL Injection
OXID eShop 6.3.4 - 'sorting' SQL Injection
https://www.exploit-db.com/exploits/48527

[webapps] Online-Exam-System 2015 - 'fid' SQL Injection
Online-Exam-System 2015 - 'fid' SQL Injection
https://www.exploit-db.com/exploits/48529

[webapps] NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection
NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection
https://www.exploit-db.com/exploits/48528

[webapps] EyouCMS 1.4.6 - Persistent Cross-Site Scripting
EyouCMS 1.4.6 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/48530

[webapps] QNAP QTS and Photo Station 6.0.3 - Remote Command Execution
QNAP QTS and Photo Station 6.0.3 - Remote Command Execution
https://www.exploit-db.com/exploits/48531

[webapps] WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
https://www.exploit-db.com/exploits/48532