RATES SYSTEM 1.0 – ‘Multiple’ SQL Injections

from Exploit-DB.com RSS Feed https://ift.tt/3ACPSTs
via IFTTT

Altova MobileTogether Server 7.3 – XML External Entity Injection (XXE)

from Exploit-DB.com RSS Feed https://ift.tt/2VOvS1j
via IFTTT

COVID19 Testing Management System 1.0 – ‘searchdata’ SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3yMJjgU
via IFTTT

Simple Library Management System 1.0 – ‘rollno’ SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3lTHf2P
via IFTTT

Xiaomi browser 10.2.4.g – Browser Search History Disclosure

from Exploit-DB.com RSS Feed https://ift.tt/3s8ZQJw
via IFTTT

WordPress Plugin Picture Gallery 1.4.2 – ‘Edit Content URL’ Stored Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3lUt3qx
via IFTTT

WordPress Plugin LifterLMS 4.21.1 – Access Other Student Grades/Answers via IDOR

from Exploit-DB.com RSS Feed https://ift.tt/3AsTffF
via IFTTT

Cockpit CMS 0.11.1 – ‘Username Enumeration & Password Reset’ NoSQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3At4i8S
via IFTTT

Amica Prodigy 1.7 – Privilege Escalation

from Exploit-DB.com RSS Feed https://ift.tt/3fQwJFL
via IFTTT

IPCop 2.1.9 – Remote Code Execution (RCE) (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3ArHaHJ
via IFTTT