Ulicms 2023.1 – create admin user via mass assignment

from Exploit-DB.com RSS Feed https://ift.tt/1C4eNYh
via IFTTT

Zenphoto 1.6 – Multiple stored XSS

from Exploit-DB.com RSS Feed https://ift.tt/NIK9WTq
via IFTTT

WBCE CMS 1.6.1 – Multiple Stored Cross-Site Scripting (XSS)

from Exploit-DB.com RSS Feed https://ift.tt/BrxKWL9
via IFTTT

Filmora 12 version ( Build 1.0.0.7) – Unquoted Service Paths Privilege Escalation

from Exploit-DB.com RSS Feed https://ift.tt/OL0Wabr
via IFTTT

Service Provider Management System v1.0 – SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/8S79U0T
via IFTTT

Roxy WI v6.1.0.0 – Unauthenticated Remote Code Execution (RCE) via subprocess_execute

from Exploit-DB.com RSS Feed https://ift.tt/hlrFzpY
via IFTTT

FusionInvoice 2023-1.0 – Stored XSS (Cross-Site Scripting)

from Exploit-DB.com RSS Feed https://ift.tt/ogknW8M
via IFTTT

MobileTrans 4.0.11 – Weak Service Privilege Escalation

from Exploit-DB.com RSS Feed https://ift.tt/BC1U9sO
via IFTTT

CiviCRM 5.59.alpha1 – Stored XSS (Cross-Site Scripting)

from Exploit-DB.com RSS Feed https://ift.tt/cvFs5lL
via IFTTT

ChurchCRM v4.5.4 – Reflected XSS via Image (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/DSrUfgb
via IFTTT