Month: September 2019

[remote] October CMS – Upload Protection Bypass Code Execution (Metasploit)

[remote] LibreNMS – Collectd Command Injection (Metasploit)

[webapps] WordPress Plugin Photo Gallery 1.5.34 – Cross-Site Scripting (2)

[webapps] WordPress Plugin Photo Gallery 1.5.34 – SQL Injection

[webapps] WordPress Plugin Photo Gallery 1.5.34 – Cross-Site Scripting

[local] Windows 10 – UAC Protection Bypass Via Windows Store (WSReset.exe) (Metasploit)

[webapps] WordPress 5.2.3 – Cross-Site Host Modification

[webapps] Dolibarr ERP-CRM 10.0.1 – 'elemid' SQL Injection