>> TAG: #remote exploit

WordPress Plugin Ninja Tables 4.1.7 – Stored Cross-Site Scripting (XSS)

WordPress 4.9.6 – Arbitrary File Deletion (Authenticated) (2)

phpMyAdmin 4.8.1 – Remote Code Execution (RCE)

Online Event Booking and Reservation System 1.0 – ‘reason’ Stored Cross-Site Scripting (XSS)

Engineers Online Portal 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)

WordPress Plugin TaxoPress 3.0.7.1 – Stored Cross-Site Scripting (XSS) (Authenticated)

Gestionale Open 11.00.00 – Local Privilege Escalation

Hikvision Web Server Build 210702 – Command Injection

Engineers Online Portal 1.0 – File Upload Remote Code Execution (RCE)

Netgear Genie 2.4.64 – Unquoted Service Path