Remote Code Execution (RCE)

airflow is vulnerable to remote code execution RCE attacks. The attacks are possible because it does not prevent the chartdata endpoints taking arbitrary strings and executing them...

WordPress Crawl Rate Tracker 2.0.2 SQL Injection

Exploit Title: WordPress Crawl Rate Tracker plugin wpdb-getresults"SELECT DATEFROMUNIXTIMEvisittime visitdate,robotname,COUNT total FROM $this-sbtrackingtable WHERE visittime = '$start' AND visittime trackingbotreportchartdata;...