[webapps] Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)
Webmin 1.973 - 'run.cgi' Cross-Site Request Forgery (CSRF)
https://www.exploit-db.com/exploits/50144

[remote] KevinLAB BEMS 1.0 - Undocumented Backdoor Account
KevinLAB BEMS 1.0 - Undocumented Backdoor Account
https://www.exploit-db.com/exploits/50145

[webapps] CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
https://www.exploit-db.com/exploits/50148

[webapps] KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
https://www.exploit-db.com/exploits/50147

[webapps] KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass
KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass
https://www.exploit-db.com/exploits/50146

[webapps] ElasticSearch 7.13.3 - Memory disclosure
ElasticSearch 7.13.3 - Memory disclosure
https://www.exploit-db.com/exploits/50149

[webapps] WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)
WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50150

[webapps] Microsoft SharePoint Server 2019 - Remote Code Execution (2)
Microsoft SharePoint Server 2019 - Remote Code Execution (2)
https://www.exploit-db.com/exploits/50151

[webapps] Elasticsearch ECE 7.13.3 - Anonymous Database Dump
Elasticsearch ECE 7.13.3 - Anonymous Database Dump
https://www.exploit-db.com/exploits/50152

[webapps] NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
https://www.exploit-db.com/exploits/50154

[dos] Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
https://www.exploit-db.com/exploits/50153

[webapps] XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)
XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)
https://www.exploit-db.com/exploits/50155

[webapps] PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection
PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection
https://www.exploit-db.com/exploits/50156

[webapps] Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass
Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass
https://www.exploit-db.com/exploits/50158

[webapps] TripSpark VEO Transportation - Blind SQL Injection
TripSpark VEO Transportation - Blind SQL Injection
https://www.exploit-db.com/exploits/50161

[remote] Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)
Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50160

[webapps] Event Registration System with QR Code 1.0 - Authentication Bypass & RCE
Event Registration System with QR Code 1.0 - Authentication Bypass & RCE
https://www.exploit-db.com/exploits/50159

[webapps] Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
https://www.exploit-db.com/exploits/50165

[webapps] IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
https://www.exploit-db.com/exploits/50164

[webapps] Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
https://www.exploit-db.com/exploits/50163