Cacti 1.2.12 – ‘filter’ SQL Injection / Remote Code Execution

from Exploit-DB.com RSS Feed https://ift.tt/2ScMcXP
via IFTTT

Kirby CMS 3.5.3.1 – ‘file’ Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3dWtNqw
via IFTTT

WordPress Plugin WPGraphQL 1.3.5 – Denial of Service

from Exploit-DB.com RSS Feed https://ift.tt/2R1yV3E
via IFTTT

Montiorr 1.7.6m – File Upload to XSS

from Exploit-DB.com RSS Feed https://ift.tt/2R662Uc
via IFTTT

Kimai 1.14 – CSV Injection

from Exploit-DB.com RSS Feed https://ift.tt/3gDxjbb
via IFTTT

SEO Panel 4.8.0 – ‘order_col’ Blind SQL Injection (2)

from Exploit-DB.com RSS Feed https://ift.tt/3nlt2dK
via IFTTT

OpenPLC 3 – Remote Code Execution (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3vjyVe9
via IFTTT

Hasura GraphQL 1.3.3 – Remote Code Execution

from Exploit-DB.com RSS Feed https://ift.tt/3nkiUSB
via IFTTT

Sipwise C5 NGCP CSC – Click2Dial Cross-Site Request Forgery (CSRF)

from Exploit-DB.com RSS Feed https://ift.tt/3azvIPM
via IFTTT

Sipwise C5 NGCP CSC – ‘Multiple’ Stored/Reflected Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3dI5Hja
via IFTTT