Exploit Title: Complaints Report Management System 1.0 – ‘username’ SQL Injection / Remote Code Execution
Multi Restaurant Table Reservation System 1.0 – ‘table_id’ Unauthenticated SQL Injection
WordPress Plugin Simple File List 5.4 – Arbitrary File Upload
Apache Flink 1.9.x – File Upload RCE (Unauthenticated)
http://don.go.th/asu.php notified by MR.COLT
CSE Bookstore version 1.0 suffers from a persistent cross site scripting vulnerability.
DedeCMS version 5.8 suffers from a cross site scripting vulnerability.
Agent Tesla Botnet suffers from a cross site scripting vulnerability.
Citadel WebCit versions prior to 926 suffer from a session hijacking vulnerability.
Wondershare Dr.Fone version 3.0.0 suffers from an unquoted service path vulnerability.