[webapps] qdPM 9.2 - DB Connection String and Password Exposure (Unauthenticated)
qdPM 9.2 - DB Connection String and Password Exposure (Unauthenticated)
https://www.exploit-db.com/exploits/50176

[webapps] qdPM 9.1 - Remote Code Execution (RCE) (Authenticated)
qdPM 9.1 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50175

[webapps] WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50174

[webapps] Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50173

[webapps] Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF
Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF
https://www.exploit-db.com/exploits/50172

[webapps] Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
https://www.exploit-db.com/exploits/50171

[remote] Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50170

[webapps] Men Salon Management System 1.0 - SQL Injection Authentication Bypass
Men Salon Management System 1.0 - SQL Injection Authentication Bypass
https://www.exploit-db.com/exploits/50169

[webapps] Oracle Fatwire 6.3 - Multiple Vulnerabilities
Oracle Fatwire 6.3 - Multiple Vulnerabilities
https://www.exploit-db.com/exploits/50167

[webapps] CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/50166

[webapps] Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
https://www.exploit-db.com/exploits/50165

[webapps] IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration
https://www.exploit-db.com/exploits/50164

[webapps] Laundry Booking Management System 1.0 - 'Multiple' SQL Injection
Laundry Booking Management System 1.0 - 'Multiple' SQL Injection
https://www.exploit-db.com/exploits/50219

[webapps] Online Traffic Offense Management System 1.0 - 'id' SQL Injection (Authenticated)
Online Traffic Offense Management System 1.0 - 'id' SQL Injection (Authenticated)
https://www.exploit-db.com/exploits/50218

[webapps] Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Laundry Booking Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/50220

[webapps] Online Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Online Traffic Offense Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
https://www.exploit-db.com/exploits/50221

[webapps] Simple Phone book/directory 1.0 - 'Username' SQL Injection (Unauthenticated)
Simple Phone book/directory 1.0 - 'Username' SQL Injection (Unauthenticated)
https://www.exploit-db.com/exploits/50223

[webapps] RaspAP 2.6.6 - Remote Code Execution (RCE) (Authenticated)
RaspAP 2.6.6 - Remote Code Execution (RCE) (Authenticated)
https://www.exploit-db.com/exploits/50224

[webapps] WordPress Plugin Mail Masta 1.0 - Local File Inclusion (2)
WordPress Plugin Mail Masta 1.0 - Local File Inclusion (2)
https://www.exploit-db.com/exploits/50226

[webapps] Online Leave Management System 1.0 - Arbitrary File Upload to Shell (Unauthenticated)
Online Leave Management System 1.0 - Arbitrary File Upload to Shell (Unauthenticated)
https://www.exploit-db.com/exploits/50228