Perl Exploits
2,854 exploits tracked across all sources.
Oracle MySQL <5.5.28 & MariaDB <5.5.28a - RCE
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.
by kingcope
Oracle MySQL <5.5.29 - Buffer Overflow
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.
by kingcope
Mcrypt < 2.6.8 - Memory Corruption
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.
by Tosh
Media Player Classic (MPC) 1.5 - WebServer Request Handling Remote Denial of Service
by X-Cisadane
TP-Link TL-WR841N Router - Local File Inclusion
by Matan Azugi
Microsoft Windows Help Program - 'WinHlp32.exe' Crash (PoC)
by coolkaveh
KMPlayer 3.0.0.1440 - '.avi' File Local Denial of Service
by Am!r
Joomla! Component com_kunena - 'search' SQL Injection
by D35m0nd142
Huawei Utps - Memory Corruption
Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file.
by Dark-Puzzle
Microsoft Windows Media Player 10 - '.avi' Integer Division By Zero Crash (PoC)
by Dark-Puzzle
VLC media player <2.0.3 - DoS
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file.
by Jean Pascal Pereira
Microsoft Office <2007 - DoS
Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls file with battery voltage data.
by Jean Pascal Pereira
FL Studio 10 Producer Edition - Buffer Overflow (SEH) (PoC)
by Dark-Puzzle
Arctic Torrent 1.2.3 - Memory Corruption (Denial of Service)
by Jean Pascal Pereira
FastStone Image Viewer 4.6 - ReadAVonIP Crash (PoC)
by Jean Pascal Pereira
JPEGsnoop 1.5.2 - RCE
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code
by Jean Pascal Pereira
CVSS 8.8
Internet Download Manager - Local Stack Buffer Overflow
by Dark-Puzzle
Internet Download Manager - Local Buffer Overflow (SEH)
by Dark-Puzzle
By Source