Exploitdb Exploits
2,814 exploits tracked across all sources.
VERITAS NetBackup - RCE
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
by Kevin Finisterre
VERITAS NetBackup - RCE
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
by Kevin Finisterre
VERITAS NetBackup - RCE
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
by Kevin Finisterre
Lynx <2.8.6 - Buffer Overflow
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
by Ulf Harnhammar
CVSS 9.8
Typsoft FTP Server < 1.11 - Resource Management Error
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected.
by wood
Solaris 10 (x86) - DtPrintinfo/Session Privilege Escalation
by Charles Stevenson
RBExplorer 1.0 - Hijacking Command Denial of Service
by basher13
phpBB 2.0.13 - 'admin_styles.php' Remote Command Execution
by RusH
phpMyAdmin <2.6.4-2.6.4-pl1 - RCE
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.
by cXIb8O3
xine-lib <1.1.1 - RCE
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
by Ulf Harnhammar
wzdftpd 0.5.4 - Command Injection
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
by kingcope
MCCS 1.0 - DoS
Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet.
by basher13
Fastream NETFile Server 7.1.2 - DoS
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.
by karak0rsan
Phpwebsite - XSS
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
by RusH
COOL! Remote Control 1.12 - Remote Denial of Service
by basher13
PhpTagCool 1.0.3 - SQL Injection
SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.
by Megabyte
FTP Internet Access Manager 1.2 - Command Execution
by basher13
Free SMTP Server 2.2 - Open Redirect
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
by basher13
Simple PHP Blog - File Deletion
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
by Kenneth Belva
Savant Web Server <3.1 - RCE
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
by basher13
Adobe Version Cue <1.3 - Local Privilege Escalation
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.
by vade79
GTChat 0.95 Alpha - 'adduser' Remote Denial of Service
by VTECin5th
MyBB <4 - SQL Injection
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282.
by Alpha_Programmer
By Source