>> TAG: #remote exploit

Batflat CMS 1.3.6 – ‘multiple’ Stored XSS

Monica 2.19.1 – ‘last_name’ Stored XSS

HFS (HTTP File Server) 2.3.x – Remote Command Execution (3)

PEEL Shopping 9.3.0 – ‘Comments/Special Instructions’ Stored Cross-Site Scripting

Comment System 1.0 – ‘multiple’ Stored Cross-Site Scripting

Online Exam System With Timer 1.0 – ’email’ SQL injection Auth Bypass

dataSIMS Avionics ARINC 664-1 – Local Buffer Overflow (PoC)

Gitea 1.12.5 – Remote Code Execution (Authenticated)

Apport 2.20 – Local Privilege Escalation

Batflat CMS 1.3.6 – Remote Code Execution (Authenticated)