Text Exploits
31,329 exploits tracked across all sources.
Inout SocialTiles 2.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout SmartDeal 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout Search Engine Ultimate Edition 7.0/8.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout QuerySpace 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout Celebrities 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout CareerLamp 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Entrepreneur Matrimonial Script - Authentication Bypass
by Ihsan Sencan
Courier Business Website Script - Authentication Bypass
by Ihsan Sencan
Zeroshell 3.6.0/3.7.0 Net Services - Remote Code Execution
by Ozer Goker
Itech Job Portal Script 9.11 - Authentication Bypass
by Dawid Morawski
Trendmicro Interscan Web Security Virtual Appliance < 6.5 - XSS
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user to inject malicious JavaScript while creating a new report. Additionally, IWSVA implements incorrect access control that allows any authenticated, remote user (even with low privileges like 'Auditor') to create or modify reports, and consequently take advantage of this XSS vulnerability. The JavaScript is executed when victims visit reports or auditlog pages.
by SlidingWindow
CVSS 5.4
Huawei Flybox B660 - Cross-Site Request Forgery (2)
by Vulnerability-Lab
Itechscripts School Management Software 2.75 - SQL Injection
A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
by Ihsan Sencan
CVSS 6.3
ECommerce-Multi-Vendor Software - Arbitrary File Upload
by Ihsan Sencan
By Source