multiple

日期	标题	类别	作者
2020-12-02	Under Construction Page with CPanel 1.0 – SQL injection	webapps	Mayur Parmar
2020-12-02	ChurchCRM 4.2.0 – CSV/Formula Injection	webapps	Mufaddal Masalawala
2020-12-02	ILIAS Learning Management System 4.3 – SSRF	webapps	Dot
2020-12-02	WebDamn User Registration & Login System with User Panel – SQLi Auth Bypass	webapps	Aakash Madaan
2020-12-02	Expense Management System – ‘description’ Stored Cross Site Scripting	webapps	Nikhil Kumar
2020-12-02	Ksix Zigbee Devices – Playback Protection Bypass (PoC)	remote	Alejandro Vazquez Vazquez
2020-12-02	DotCMS 20.11 – Stored Cross-Site Scripting	webapps	Hardik Solanki
2020-12-02	Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Edit Profile	webapps	Shahrukh Iqbal Mirza
2020-12-02	Artworks Gallery 1.0 – Arbitrary File Upload RCE (Authenticated) via Add Artwork	webapps	Shahrukh Iqbal Mirza
2020-12-02	Employee Record Management System 1.1 – Login Bypass SQL Injection	webapps	Anurag Kumar
2020-12-01	Tendenci 12.3.1 – CSV/ Formula Injection	webapps	Mufaddal Masalawala
2020-12-01	Setelsa Conacwin 3.7.1.2 – Local File Inclusion	webapps	Bryan Rodriguez Martin
2020-11-27	Acronis Cyber Backup 12.5 Build 16341 – Unauthenticated SSRF	webapps	Julien Ahrens
2020-11-27	SAP Lumira 1.31 – Stored Cross-Site Scripting	local	Ilca Lucian Florin
2020-11-26	Pure-FTPd 1.0.48 – Remote Denial of Service	dos	xynmaps
2020-11-24	Apache OpenMeetings 5.0.0 – ‘hostname’ Denial of Service	webapps	SunCSR
2020-11-24	nopCommerce Store 4.30 – ‘name’ Stored Cross-Site Scripting	webapps	Hemant Patidar
2020-11-23	LifeRay 7.2.1 GA2 – Stored XSS	webapps	3ndG4me
2020-11-19	Nagios Log Server 2.1.7 – Persistent Cross-Site Scripting	webapps	Emre ÖVÜNÇ
2020-11-19	M/Monit 3.7.4 – Password Disclosure	webapps	Dolev Farhi
2020-11-19	M/Monit 3.7.4 – Privilege Escalation	webapps	Dolev Farhi
2020-11-19	TestBox CFML Test Framework 4.1.0 – Directory Traversal	webapps	Darren King
2020-11-19	TestBox CFML Test Framework 4.1.0 – Arbitrary File Write and Remote Code Execution	webapps	Darren King
2020-11-19	xuucms 3 – ‘keywords’ SQL Injection	webapps	icekam