CMS Made Simple 2.2.14 – Authenticated Arbitrary File Upload

from Exploit-DB.com RSS Feed https://ift.tt/2PM6AKL
via IFTTT

Fuel CMS 1.4.7 – ‘col’ SQL Injection (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3gPI9YH
via IFTTT

BarcodeOCR 19.3.6 – ‘BarcodeOCR’ Unquoted Service Path

from Exploit-DB.com RSS Feed https://ift.tt/2PGQHp8
via IFTTT

ManageEngine ADSelfService Build prior to 6003 – Remote Code Execution (Unauthenticated)

from Exploit-DB.com RSS Feed https://ift.tt/3ad8YUm
via IFTTT

Warehouse Inventory System 1.0 – Cross-Site Request Forgery (Change Admin Password)

from Exploit-DB.com RSS Feed https://ift.tt/3gEAVqu
via IFTTT

Daily Expenses Management System 1.0 – ‘item’ SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3fAzfwL
via IFTTT

All-Dynamics Digital Signage System 2.0.2 – Cross-Site Request Forgery (Add Admin)

from Exploit-DB.com RSS Feed https://ift.tt/2XFEAwL
via IFTTT

CodeMeter 6.60 – ‘CodeMeter.exe’ Unquoted Service Path

from Exploit-DB.com RSS Feed https://ift.tt/3fBsFWO
via IFTTT

Victor CMS 1.0 – ‘Search’ SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/3fHBgHT
via IFTTT

Stock Management System 1.0 – Authentication Bypass

from Exploit-DB.com RSS Feed https://ift.tt/2EJyoNB
via IFTTT