>> AUTHOR: deepcore

Telegram Desktop version 2.9.2 suffers from a denial of service vulnerability.

COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Whitepaper called HiveNightmare AKA SeriousSAM. It details an overview of CVE-2021-36934 and provides exploitation details.

WordPress GetPaid payments plugin version 2.4.6 suffers from an html injection vulnerability.

Traffic Offense Management System version 1.0 remote code execution exploit that leverages a remote SQL vulnerability.

Fabasoft cloud website versions prior to 18.0.17 suffer from a cross site scripting vulnerability.

OpenEMR version 6.0.0 suffers from an insecure direct object reference vulnerability.

Confluence Server version 7.12.4 unauthenticated OGNL injection remote code execution exploit.

Many Moxa devices suffer from command injection, cross site scripting, and outdated software vulnerabilities.

Linux kernels from 5.7-rc1 prior to 5.13-rc4, 5.12.4, 5.11.21, and 5.10.37 are vulnerable to a bug in the eBPF verifier’s verification of ALU32 operations in the scalar32_min_max_and function when performing…