>> TAG: #remote exploit

DomainMOD 4.11.01 – ‘assets/add/dns.php’ Cross-Site Scripting

DomainMOD 4.11.01 – ‘category.php CatagoryName, StakeHolder’ Cross-Site Scripting

DomainMOD 4.11.01 – ‘assets/edit/host.php?whid=5’ Cross-Site Scripting

WordPress Plugin Booking Calendar 8.4.3 – Authenticated SQL Injection

MediaMonkey 4.1.23 – ‘.mp3’ URL Denial of Service (PoC)

ApowerManager 3.1.7 – Phone Manager Remote Denial of Service (DoS)

snapd < 2.37.0 (Ubuntu) – 'dirty_sock' Local Privilege Escalation (1)

snapd < 2.37.0 (Ubuntu) – 'dirty_sock' Local Privilege Escalation (2)

OPNsense < 19.1.1 – Cross-Site Scripting

Jenkins 2.150.2 – Remote Command Execution (Metasploit)