Library Management System version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Openfire version 4.6.0 suffers from a persistent cross site scripting vulnerability.

Barcodes Generator version 1.0 suffers from a persistent cross site scripting vulnerability.

WordPress Popup Builder plugin versions 3.69.6 and below suffer from multiple cross site scripting vulnerabilities.

OpenCart version 3.0.3.6 suffers from a cross site request forgery vulnerability.

BigtreeCMS version 4.4.11 suffers from a cross site scripting vulnerability.

This Metasploit module provides remote code execution against GitLab Community Edition (CE) and Enterprise Edition (EE). It combines an arbitrary file read to extract the Rails secret_key_base, and gains remote…