>> TAG: #0day

ThinkPHP 5.X – Remote Command Execution

Real Estate Custom Script 2.0 – SQL Injection

Job Portal Platform 1.0 – SQL Injection

Modern POS 1.3 – SQL Injection

Modern POS 1.3 – Arbitrary File Download

Bigcart – Ecommerce Multivendor System 1.0 – SQL Injection

Horde Imp – ‘imap_open’ Remote Command Execution

Across DR-810 ROM-0 – Backup File Disclosure

Umbraco CMS 7.12.4 – Authenticated Remote Code Execution

Windows Privilege Escalations