Anuko Time Tracker 1.19.23.5311 – Password Reset leading to Account Takeover

from Exploit-DB.com RSS Feed https://ift.tt/2JjFSK8
via IFTTT

Anuko Time Tracker 1.19.23.5311 – No rate Limit on Password Reset functionality

from Exploit-DB.com RSS Feed https://ift.tt/3qnzLVu
via IFTTT

ChurchCRM 4.2.1 – Persistent Cross Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3lvZl7g
via IFTTT

ChurchCRM 4.2.0 – CSV/Formula Injection

from Exploit-DB.com RSS Feed https://ift.tt/37vZ3YW
via IFTTT

WebDamn User Registration & Login System with User Panel – SQLi Auth Bypass

from Exploit-DB.com RSS Feed https://ift.tt/33CQpXv
via IFTTT

Ksix Zigbee Devices – Playback Protection Bypass (PoC)

from Exploit-DB.com RSS Feed https://ift.tt/3fWeAoW
via IFTTT

DotCMS 20.11 – Stored Cross-Site Scripting

from Exploit-DB.com RSS Feed https://ift.tt/33xdSta
via IFTTT

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Edit Profile

from Exploit-DB.com RSS Feed https://ift.tt/36uvdFd
via IFTTT

Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3mIIj7v
via IFTTT

WonderCMS 3.1.3 – ‘Menu’ Persistent Cross-Site Scripting

from Exploit-DB.com RSS Feed https://ift.tt/3ltm2Jd
via IFTTT