Exploitdb Exploits
2,012 exploits tracked across all sources.
Microsoft Internet Explorer 6-8 - Info Disclosure
Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets (CSS) documents, which allows remote attackers to obtain sensitive information from a different (1) domain or (2) zone via a crafted web site, aka "CSS Special Character Information Disclosure Vulnerability."
by Chris Evans
Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (2)
by Abysssec
ArtGK CMS - Cross-Site Scripting / HTML Injection
by High-Tech Bridge SA
Hycus CMS 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities
by 10n1z3d
Flock Browser 3.0.0.3989 - XSS
Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crafted bookmark.
by Lostmon
Microsoft Internet Explorer 8 - Auth Bypass
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.
by Mario Heiderich
CMSimple 3.3 - Cross-Site Scripting / Cross-Site Request Forgery
by High-Tech Bridge SA
Zomplog 3.9 - Cross-Site Scripting / Cross-Site Request Forgery
by 10n1z3d
Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities
by Fady Mohammed Osman
Kleeja Upload - Cross-Site Request Forgery (Change Admin Password)
by KOLTN S
RSP MP3 Player - OCX ActiveX Buffer Overflow HeapSpray
by Madjix
Onyx - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Mystic 0.1.4 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
dBpowerAMP Audio Player 2 - 'FileExists' ActiveX Buffer Overflow
by s-dz
Advanced File Vault - 'eSellerateControl350.dll' ActiveX HeapSpray
by ThE g0bL!N
Nagios XI - Multiple Cross-Site Request Forgery Vulnerabilities
by Adam Baldwin
Tomaz Muraus Open Blog 1.2.1 - CSRF
Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests to admin/users/edit that grant administrative privileges.
by High-Tech Bridge SA
Tomaz Muraus Open Blog 1.2.1 - CSRF
Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by High-Tech Bridge SA
DiamondList 0.1.6 - CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.
by High-Tech Bridge SA
By Source