GravCMS 1.10.7 – Unauthenticated Arbitrary YAML Write/Update (Metasploit)

from Exploit-DB.com RSS Feed https://ift.tt/3tzxxUi
via IFTTT

Adtran Personal Phone Manager 10.8.1 – DNS Exfiltration

from Exploit-DB.com RSS Feed https://ift.tt/3avMHSW
via IFTTT

Adtran Personal Phone Manager 10.8.1 – ‘Multiple’ Reflected Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/2QjG4wg
via IFTTT

Adtran Personal Phone Manager 10.8.1 – ’emailAddress’ Stored Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3aKJj79
via IFTTT

OpenEMR 5.0.2.1 – Remote Code Execution

from Exploit-DB.com RSS Feed https://ift.tt/3dBOacx
via IFTTT

rconfig 3.9.6 – Arbitrary File Upload to Remote Code Execution (Authenticated) (2)

from Exploit-DB.com RSS Feed https://ift.tt/3sxW2jj
via IFTTT

Tenda D151 & D301 – Configuration Download (Unauthenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3dE5wpf
via IFTTT

RemoteClinic 2 – ‘Multiple’ Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/2QnQZVA
via IFTTT

Discourse 2.7.0 – Rate Limit Bypass leads to 2FA Bypass

from Exploit-DB.com RSS Feed https://ift.tt/3dB93o8
via IFTTT

BlackCat CMS 1.3.6 – ‘Multiple’ Stored Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/3gokD7X
via IFTTT