Exploitdb Exploits
2,012 exploits tracked across all sources.
SPlayer XvidDecoder 3.3 - ActiveX Remote Execution (PoC)
by superli
JcomBand toolbar on IE - ActiveX Buffer Overflow
by germaya_x & D3V!L FUCKER
Microsoft Internet Explorer 8 - CSS 'expression' Remote Denial of Service
by MustLive
CMS Made Simple 1.x - Cross-Site Scripting / Cross-Site Request Forgery
by Truong Thao Nguyen
Google Chrome 3.0195.38 - Status Bar Obfuscation
by 599eme Man
SoftCab Sound Converter <1.2 - Path Traversal
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information.
by ThE g0bL!N
Mozilla Firefox < 3.0.10 - Access Control
Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.
by Jordi Chancel
BOLDfx Recipe Script 5.0 - Multiple Remote Vulnerabilities
by Milos Zivanovic
BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities
by Milos Zivanovic
SAP GUI for Windows - 'sapirrfc.dll' ActiveX Overflow
by Abysssec
MyActiveX <1.4.8.0 - Buffer Overflow
Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information.
by shinnai
WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting / Authentication Bypass Vulnerabilities (2)
by MustLive
WordPress Plugin Fuctweb CapCC 1.0 CAPTCHA - Security Bypass
by MustLive
EasyMail Objects 'EMSMTP.DLL 6.0.1' - ActiveX Control Remote Buffer Overflow
by Will Dormann
Mozilla Firefox - Denial of Service
layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
by Carsten Book
AfterLogic WebMail Pro <4.7.10 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) HistoryStorageObjectName and (2) HistoryKey parameters.
by Sébastien Duquette
EMC Captiva PixTools Distributed Imaging <2.2 - File Creation/Overw...
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods.
by Giuseppe Fuggiano
IBM Installation Manager < 1.3.2 - Code Injection
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.
by bruiser
EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow
by pyrokinesis
Persits Xupload - Path Traversal
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method.
by pyrokinesis
Kylinsoft InstantGet 2.08 - ActiveX Control 'ShowBar' Method Buffer Overflow
by the_Edit0r
Quiksoft EasyMail 6.0.3.0 - IMAP 'connect()' ActiveX Buffer Overflow
by Sebastian Wolfgarten
Quiksoft EasyMail Objects 6 - Buffer Overflow
Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method.
by bmgsec
By Source