Exploitdb Exploits
31,346 exploits tracked across all sources.
Ajenticp < 1.2.23.13 - XSS
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
by Numan OZDEMIR
CVSS 6.1
xorg-x11-server <1.20.3 - Privilege Escalation
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
by Hacker Fantastic
CVSS 6.6
Adult Filter 1.0 - Denial of Service (PoC)
by Beren Kuday GÖRÜN
Pokkho Lango - XSS
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name parameter to the admin/settings/update URI.
by Ismail Tasdelen
CVSS 4.8
Axiositalia Registro Elettronico - XSS
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter.
by Dino Barlattani
CVSS 6.1
ServersCheck Monitoring Software 14.3.3 - 'id' SQL Injection
by hyp3rlinx
MGB OpenSource Guestbook 0.7.0.2 - 'id' SQL Injection
by Ihsan Sencan
ServersCheck Monitoring Software 14.3.3 - Arbitrary File Write
by hyp3rlinx
School ERP Pro+Responsive 1.0 - Arbitrary File Download
by Ihsan Sencan
Appsource School Management System 1.0 - 'student_id' SQL Injection
by Ihsan Sencan
Viva Visitor & Volunteer ID Tracking 0.95.1 - 'fname' SQL Injection
by Ihsan Sencan
The Open ISES Project 3.30A - Arbitrary File Download
by Ihsan Sencan
The Open ISES Project 3.30A - 'tick_lat' SQL Injection
by Ihsan Sencan
Apple iOS/macOS - Sandbox Escape due to Trusted Length Field in Shared Memory used by HID Event Subsystem
by Google Security Research
By Source