>> CATEGORY: Security

Strapi CMS 3.0.0-beta.17.4 – Set Password (Unauthenticated) (Metasploit)

Hotel Reservation System 1.0 – SQLi (Unauthenticated)

FileBrowser 2.17.2 – Cross Site Request Forgery (CSRF) to Remote Code Execution (RCE)

Hospital Management System 4.0 – ‘multiple’ SQL Injection

WordPress Plugin International Sms For Contact Form 7 Integration V1.2 – Cross Site Scripting (XSS)

Wing FTP Server 4.3.8 – Remote Code Execution (RCE) (Authenticated)

WordPress Plugin Simple Job Board 2.9.3 – Local File Inclusion

Servisnet Tessa – MQTT Credentials Dump (Unauthenticated) (Metasploit)

WBCE CMS 1.5.2 – Remote Code Execution (RCE) (Authenticated)

FLAME II MODEM USB – Unquoted Service Path