>> TAG: #remote exploit

WordPress Plugin Total Upkeep 1.14.9 – Database and Files Backup Download

Rumble Mail Server 0.51.3135 – ‘servername’ Stored XSS

Rumble Mail Server 0.51.3135 – ‘domain and path’ Stored XSS

LibreNMS 1.46 – MAC Accounting Graph Authenticated SQL Injection

Rukovoditel 2.6.1 – Cross-Site Request Forgery (Change password)

Macally WIFISD2-2A82 2.000.010 – Guest to Root Privilege Escalation

Rumble Mail Server 0.51.3135 – ‘username’ Stored XSS

Gitlab 11.4.7 – Remote Code Execution

Openfire 4.6.0 – ‘sql’ Stored XSS

Jenkins 2.235.3 – ‘tooltip’ Stored Cross-Site Scripting