Text Exploits
31,329 exploits tracked across all sources.
Google Chrome (Fedora 25 / Ubuntu 16.04) - 'tracker-extract' / 'gnome-video-thumbnailer' + 'totem' Drive-By Download
by Chris Evans
Apple Iphone OS < 10.2 - Memory Corruption
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted certificate profile.
by Maksymilian Arciemowicz
CVSS 8.8
EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation
by Ashiyane Digital Security Team
Cisco Unified Communications Manager - Path Traversal
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.
by justpentest
NETGEAR - RCE
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
by Acew0rm
CVSS 8.8
Microsoft Edge - Memory Corruption
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6153.
by Skylined
Microsoft Edge - Memory Corruption
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."
by Skylined
CVSS 8.8
Google Android < 6.0.1 - Access Control
An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31350622.
by Google Security Research
CVSS 7.8
Google Android - 'IOMXNodeInstance::enableNativeBuffers' Unchecked Index
by Google Security Research
Microsoft MSINFO32.EXE 6.1.7601 - '.NFO' XML External Entity Injection
by hyp3rlinx
Windows Event Viewer - Info Disclosure
An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration.
To exploit the vulnerability, an attacker could create a file containing specially crafted XML content and convince an authenticated user to import the file.
The update addresses the vulnerability by modifying the way that the Event Viewer parses XML input.
by hyp3rlinx
CVSS 4.7
Apache CouchDB <2.0.0 - Privilege Escalation
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB batch or binary files. A subsequent service or server restart will then run that binary with administrator privilege. This issue affected CouchDB 2.0.0 (Windows platform only) and was addressed in CouchDB 2.0.0.1.
by hyp3rlinx
CVSS 7.8
WordPress Plugin Single Personal Message 1.0.3 - SQL Injection
by Lenon Leite
Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities
by Persian Hack Team
Microsoft Windows Media Center 6.1.7600 - 'ehshell.exe' XML External Entity Injection
by hyp3rlinx
Microsoft Excel Starter 2010 - XML External Entity Injection
by hyp3rlinx
Microsoft Authorization Manager 6.1.7601 - 'azman' XML External Entity Injection
by hyp3rlinx
By Source