Python Exploits
5,949 exploits tracked across all sources.
Sysax Multi Server 5.53 - SFTP (Authenticated) (SEH)
by Craig Freyman
Saurabh Gupta Tiny Server < 1.1.9 - Improper Input Validation
Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.
by localh0t
Pidgin - Cleartext Transmission
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
by Dimitris Glynos
CVSS 5.5
DAMN Hash Calculator 1.5.1 - Local Heap Overflow (PoC)
by Julien Ahrens
Blade API Monitor - Unicode Bypass Serial Number Buffer Overflow
by b33f
HP San/iq < 9.0 - OS Command Injection
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.
by Nicolas Gregoire
Symantec pcAnywhere <12.5.3 - DoS
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.
by Johnathan Norman
HP San/iq - Credentials Management
hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.
by Nicolas Gregoire
Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)
by Craig Freyman
Savant Web Server 3.1 - Remote Buffer Overflow (Egghunter)
by red-dragon
Savant Web Server 3.1 - Remote Buffer Overflow (4)
by red-dragon
Avaya WinPDM UniteHostRouter 3.8.2 - Remote Command Execution
by Abysssec
VideoLAN VLC Media Player 1.2.0 - 'libtaglib_pluggin.dll' Denial of Service
by Mitchell Adair
Sysax Multi Server < 5.50 - Memory Corruption
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
by Craig Freyman
TFTP Server SP 1.4 - Buffer Overflow
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.
by b33f
Geopainting Gpsmapedit - Memory Corruption
GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a lst file.
by Julien Ahrens
Microsoft Office - Buffer Overflow
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
by b33f & g11tch
CVSS 7.8
Php < 5.3.8 - Improper Input Validation
PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
by Christian Mehlmauer
VideoLAN VLC Media Player 1.1.11 - libav 'libavcodec_plugin.dll' Denial of Service
by Mitchell Adair
By Source