>> AUTHOR: deepcore

Umbraco CMS 8.9.1 – Path traversal and Arbitrary File Write (Authenticated)

WordPress Plugin ProfilePress 3.1.3 – Privilege Escalation (Unauthenticated)

Strapi 3.0.0-beta – Set Password (Unauthenticated)

Usermin 1.820 – Remote Code Execution (RCE) (Authenticated)

Strapi CMS 3.0.0-beta.17.4 – Remote Code Execution (RCE) (Unauthenticated)

Strapi 3.0.0-beta.17.7 – Remote Code Execution (RCE) (Authenticated)

Projectsend r1295 – ‘name’ Stored XSS

MySQL User-Defined (Linux) x32 / x86_64 – ‘sys_exec’ Local Privilege Escalation (2)

Bus Pass Management System 1.0 – ‘viewid’ SQL Injection

ZesleCP 3.1.9 – Remote Code Execution (RCE) (Authenticated)