Exploitdb Exploits
2,814 exploits tracked across all sources.
Miltenovik Manojlo MemHT Portal <4.0.1 - RCE
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.
by StAkeR
FTPShell Server 4.3 - Buffer Overflow
Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (aka .key) file.
by LiquidWorm
Joomla! com_prod 5.0 - SQL Injection
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php.
by XaDoS
LinPHA Photo Gallery 2.0 - Remote Command Execution
by Osirys
PcCookBook - Joomla! - SQL Injection
SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844.
by InjEctOr5
Fhimage 1.2.1 - Remote Command Execution (mq = off)
by Osirys
Novell Netware 6.5 - 'ICEbrowser' Remote System Denial of Service
by Jeremy Brown
MPlayer 1.0rc2 - TwinVQ Stack Buffer Overflow (PoC)
by sCORPINo
Ryneezy phoSheezy 0.2 - Code Injection
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information.
by Osirys
Ryneezy phoSheezy 0.2 - Info Disclosure
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password.
by Osirys
Ryneezy phoSheezy 0.2 - Code Injection
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by Osirys
dBpowerAMP Audio Player 2 - '.pls' Local Buffer Overflow (PoC)
by Stack
Microsoft HTML Help Workshop <4.74 - Buffer Overflow
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
by SkD
Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass
by Xianur0
VUPlayer 2.49 - Buffer Overflow
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.
by sCORPINo
Microsoft Windows XP SP3 - Buffer Overflow
Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file.
by securfrog
Browse3D 3.5 - '.sfs' Local Buffer Overflow (PoC)
by Houssamix
Joomla! Component com_jashowcase - 'catid' SQL Injection
by EcHoLL
VUPlayer 2.49 - Buffer Overflow
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.
by Houssamix
VUPlayer 2.49 - Buffer Overflow
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.
by aBo MoHaMeD
Heathco Software MP3 TrackMaker <1.5 - Buffer Overflow
Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an invalid .mp3 file.
by Houssamix
By Source