ElasticSearch 7.13.3 – Memory disclosure

from Exploit-DB.com RSS Feed https://ift.tt/2WbyIxw
via IFTTT

CSZ CMS 1.2.9 – ‘Multiple’ Arbitrary File Deletion

from Exploit-DB.com RSS Feed https://ift.tt/3eYDdCf
via IFTTT

KevinLAB BEMS 1.0 – File Path Traversal Information Disclosure (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3BnIe0t
via IFTTT

KevinLAB BEMS 1.0 – Unauthenticated SQL Injection / Authentication Bypass

from Exploit-DB.com RSS Feed https://ift.tt/3ivnXgP
via IFTTT

KevinLAB BEMS 1.0 – Undocumented Backdoor Account

from Exploit-DB.com RSS Feed https://ift.tt/3eGkNG2
via IFTTT

Webmin 1.973 – ‘run.cgi’ Cross-Site Request Forgery (CSRF)

from Exploit-DB.com RSS Feed https://ift.tt/3ivbPfQ
via IFTTT

WordPress Plugin KN Fix Your Title 1.0.1 – ‘Separator’ Stored Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/36MxJpp
via IFTTT

PEEL Shopping 9.3.0 – ‘id’ Time-based SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3ioeeci
via IFTTT

Dolibarr ERP/CRM 10.0.6 – Login Brute Force

from Exploit-DB.com RSS Feed https://ift.tt/3zbfmXp
via IFTTT

WordPress Plugin Mimetic Books 0.2.13 – ‘Default Publisher ID field’ Stored Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3evIyAo
via IFTTT