>> TAG: #0day

WordPress Google Map Plugin < 4.0.4 – SQL Injection

WordPress Ultimate Form Builder Lite Plugin < 1.3.7 – SQL Injection

OX App Suite 7.8.4 – Multiple Vulnerabilities

Lateral Movement Using WinRM

Joomla! Component EkRishta 2.10 – ‘cid’ SQL Injection

userSpice 4.3.24 – ‘X-Forwarded-For’ Cross-Site Scripting

WordPress Plugin Pie Register < 3.0.9 – Blind SQL Injection

Schools Alert Management Script – Arbitrary File Deletion

Event Manager Admin panel – ‘events_new.php’ SQL injection

Schools Alert Management Script – SQL Injection