Exploitdb Exploits
3,138 exploits tracked across all sources.
SUMUS 0.2.2 - Remote Code Execution via Large Packet to TCP Port 81
Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.
by vade79
Lightspeed DeluxeFTP 6.01 - Info Disclosure
Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
by Kozan
Greylisting daemon (GLD) 1.3-1.4 - Remote Code Execution via Format String in ErrorLog Function
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.
by Xpl017Elz
Greylisting daemon <1.4 - Buffer Overflow
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.
by Xpl017Elz
Microsoft Jet DB engine <4.00.8618.0 - RCE
Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.
by Stuart Pearson
Linux Kernel <2.6.11.5 - Privilege Escalation
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
by qobaiashi
Rebrand P2P Share Spy <2.2 - Privilege Escalation
Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges.
by Kozan
FTP Now 2.6.14 - Plaintext Credential Exposure in sites.xml
FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.
by Kozan
Aeon 0.2a - Buffer Overflow via HOME Environment Variable
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
by patr0n
GetDataBack for NTFS 2.31 - Info Disclosure
GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information.
by Kozan
SCO OpenServer 5.0.7 - Buffer Overflow
Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.
by pasquale minervini
Linux Kernel 2.6.11 - Denial of Service via AIO Process Exit Without Release
AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.
by Daniel McNeil
BakBone NetVault <7 - Buffer Overflow
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.
by class101
BakBone NetVault <7 - Buffer Overflow
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.
by class101
YepYep mtftpd 0.0.3 - Buffer Overflow via Long Path
Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path.
by gunzip
Linux Kernel 2.6.10 - File Lock Local Denial of Service
by ChoiX
YepYep mtftpd 0.0.3 - Remote Code Execution via Format String in CWD Command
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
by darkeagle
Cyrus imapd 2.2.4 < 2.2.8 - 'imapmagicplus' Remote Overflow
by crash-x
By Source