[webapps] ProjeQtOr Project Management System v10.4.1 - Multiple XSS
ProjeQtOr Project Management System v10.4.1 - Multiple XSS
https://www.exploit-db.com/exploits/51588

[webapps] News Portal v4.0 - SQL Injection (Unauthorized)
News Portal v4.0 - SQL Injection (Unauthorized)
https://www.exploit-db.com/exploits/51587

[webapps] Icinga Web 2.10 - Authenticated Remote Code Execution
Icinga Web 2.10 - Authenticated Remote Code Execution
https://www.exploit-db.com/exploits/51586

[local] XAMPP 8.2.4 - Unquoted Path
XAMPP 8.2.4 - Unquoted Path
https://www.exploit-db.com/exploits/51585

[webapps] Pluck v4.7.18 - Remote Code Execution (RCE)
Pluck v4.7.18 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/51592

[webapps] WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
WinterCMS < 1.2.3 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/51591

[webapps] Admidio v4.2.10 - Remote Code Execution (RCE)
Admidio v4.2.10 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/51590

[webapps] PimpMyLog v1.7.14 - Improper access control
PimpMyLog v1.7.14 - Improper access control
https://www.exploit-db.com/exploits/51593

[webapps] Vaidya-Mitra 1.0 - Multiple SQLi
Vaidya-Mitra 1.0 - Multiple SQLi
https://www.exploit-db.com/exploits/51596

[webapps] Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
https://www.exploit-db.com/exploits/51595

[webapps] phpfm v1.7.9 - Authentication type juggling
phpfm v1.7.9 - Authentication type juggling
https://www.exploit-db.com/exploits/51594

[webapps] Blackcat Cms v1.4 - Stored XSS
Blackcat Cms v1.4 - Stored XSS
https://www.exploit-db.com/exploits/51604

[webapps] ABB FlowX v4.00 - Exposure of Sensitive Information
ABB FlowX v4.00 - Exposure of Sensitive Information
https://www.exploit-db.com/exploits/51603

[webapps] Statamic 4.7.0 - File-Inclusion
Statamic 4.7.0 - File-Inclusion
https://www.exploit-db.com/exploits/51602

[webapps] CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
CmsMadeSimple v2.2.17 - Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/51601

[webapps] CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
CmsMadeSimple v2.2.17 - Remote Code Execution (RCE)
https://www.exploit-db.com/exploits/51600

[webapps] CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
CmsMadeSimple v2.2.17 - session hijacking via Server-Side Template Injection (SSTI)
https://www.exploit-db.com/exploits/51599

[webapps] Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
Online Piggery Management System v1.0 - unauthenticated file upload vulnerability
https://www.exploit-db.com/exploits/51598

[webapps] Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
Backdrop Cms v1.25.1 - Stored Cross-Site Scripting (XSS)
https://www.exploit-db.com/exploits/51597

[remote] Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
https://www.exploit-db.com/exploits/51607