>> TAG: #remote exploit

Tableau – XML External Entity

LSoft ListServ < 16.5-2018a – Cross-Site Scripting

openITCOCKPIT 3.6.1-2 – Cross-Site Request Forgery

WordPress Plugin Import Export WordPress Users 1.3.1 – CSV Injection

WordPress Plugin UserPro 4.9.32 – Cross-Site Scripting

Exim 4.87 / 4.91 – Local Privilege Escalation (Metasploit)

Nimble Streamer 3.0.2-2 < 3.5.4-9 – Directory Traversal

Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Arbitrary File Disclosure (metasploit)

WordPress Add Mime Types Plugin 2.2.1 – Cross-Site Request Forgery

Kimai 2 – Persistent Cross-Site Scripting