Exploits & CVE's

Authored by Lee Se Hyoung WordPress Tree Page View plugin version 1.6.7 suffers from a cross site scripting vulnerability. advisories | CVE-2023-30868 Change Mirror Download # Exploit Title: Tree Page View Plugin 1.6.7...

Authored by indoushka WordPress WP File Manager plugin version 7.1.7 appears to leave backups in a world accessible directory under the document root. Change Mirror Download ====================================================================================================================================| # Title ...

Authored by Murat Demirci Macro Expert version 4.9 suffers from an unquoted service path vulnerability. Change Mirror Download # Exploit Title: Macro Expert 4.9 - Unquoted Service Path# Date: 04/06/2023# Exploit Author:...

Authored by tmrswrr Total CMS version 1.7.4 suffers from a remote shell upload vulnerability. Change Mirror Download # Exploit Title: Total CMS 1.7.4 - Remote Code Execution (RCE) on File Upload (Authenticated)...

Authored by Todd J. | Site packetstormsecurity.com This archive contains all of the 173 exploits added to Packet Storm in May, 2023.

Authored by nu11secur1ty Advance Charity Management version 1.0 fails to set the secure flag on a session identifier. Change Mirror Download ## Title: Advance Charity Management-1.0 - TLS cookie without secureflag set-PHPSESSID...

Authored by tmrswrr MotoCMS version 3.4.3 suffers from a remote SQL injection vulnerability. Change Mirror Download # Title: MotoCMS Version 3.4.3 - SQL Injection# Author: tmrswrr# Date: 01/06/2023# Vendor: https://www.motocms.com# Link: https://www.motocms.com/website-templates/demo/189526.html#...

Authored by Julien Ahrens | Site rcesecurity.com FC Red Bull Salzburg App versions 5.1.9-R and below suffer from an improper authorization vulnerability. advisories | CVE-2023-29459 Change Mirror Download RCE Security Advisoryhttps://www.rcesecurity.com1. ADVISORY INFORMATION=======================Product:...

Authored by Taliya Bilal WordPress Circle Progress plugin version 1.0 suffers from a persistent cross site scripting vulnerability. Change Mirror Download # Exploit Title: WordPress Plugin Circle progress bar – Cross sitescripting-Stored#...

Authored by Mateus Machado Tesser File Manager Advanced Shortcode version 2.3.2 suffers from a remote code execution vulnerability. advisories | CVE-2023-2068 Change Mirror Download # Exploit Title: File Manager Advanced Shortcode 2.3.2 -...