Exploitdb Exploits
2,814 exploits tracked across all sources.
Cash Back Comparison Script 1.0 - SQL Injection
SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.
by Ihsan Sencan
CVSS 9.8
MikroTik <6.38.5 - DoS
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.
by FarazPajohan
CVSS 7.5
Alstrasoft Template Seller Pro 3.25e - 'tempid' SQL Injection
by Ihsan Sencan
Microsoft Windows Server 2008/2012 - LDAP RootDSE Netlogon Denial of Service
by Todor Donev
Xion Audio Player 1.5 (build 160) - '.mp3' Crash (PoC)
by Charley Celice
CoolPlayer (Standalone) build 2.19 - '.m3u' Local Stack Overflow
by Charley Celice
Ganeti <2.9.7-2.15.2 - DoS
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when used in SSL mode, allows remote attackers to cause a denial of service (resource consumption) via SSL parameter renegotiation.
by Pierre Kim
CVSS 7.5
Ganeti <2.9.7-2.15.2 - Info Disclosure
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.
by Pierre Kim
CVSS 7.5
Ovidentia NewsLetter Module 2.2 - 'admin.php' Remote File Inclusion
by bd0rk
vBulletin 5 Connect <5.1.9 - Code Injection
The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.
by Mohammad Reza Espargham
TECO SG2 LAD Client 3.51 - '.gen' Overwrite Buffer Overflow (SEH)
by LiquidWorm
TECO JN5 L510-DriveLink 1.482 - '.lf5' Overwrite Buffer Overflow (SEH)
by LiquidWorm
libsndfile 1.0.25 - Buffer Overflow
Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
by Marco Romano
Logitech Webcam Software 1.1 - 'eReg.exe' Local Buffer Overflow (SEH Unicode)
by Robbie Corley
VeryPDF HTML Converter 2.0 - Local Buffer Overflow (SEH/ToLower() Bypass)
by Robbie Corley
By Source