Text Exploits
31,330 exploits tracked across all sources.
Apple iOS <9.3 & OS X <10.11.4 - RCE
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.
by Google Security Research
CVSS 7.0
Wireshark - dissect_ber_integer Static Out-of-Bounds Write
by Google Security Research
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download
by Felipe Molina
WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download
by CrashBandicot
WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion
by AMAR^SHG
WordPress Plugin Brandfolder 3.0 - Local/Remote File Inclusion
by AMAR^SHG
Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection
by Persian Hack Team
Xoops 2.5.7.2 - Cross-Site Request Forgery (Arbitrary User Deletions)
by hyp3rlinx
WordPress Plugin Image Export 1.1.0 - Arbitrary File Disclosure
by AMAR^SHG
WordPress Plugin eBook Download 1.1 - Directory Traversal
by Wadeek
ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities
by Michael Helwig
iTop 2.2.1 - Cross-Site Request Forgery
by High-Tech Bridge SA
Dating Pro Genie 2015.7 - Cross-Site Request Forgery
by High-Tech Bridge SA
D-Link DWR-932 Firmware 4.00 - Authentication Bypass
by Saeed reza Zamanian
WildFly <10.0.0.Final - Info Disclosure
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) "meaningless" characters.
by Tal Solomon of Palantir Security
CVSS 7.5
ZenPhoto 1.4.11 - Remote File Inclusion
by Curesec Research Team
Akips Network Monitor < 16.5 - OS Command Injection
The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execute arbitrary OS commands via shell metacharacters in the username parameter (a failed login attempt returns the command-injection output to a limited login failure field). This is fixed in 16.6.
by BrianWGray
CVSS 9.8
Netwrix Auditor 7.1.322.0 - ActiveX 'sourceFile' Stack Buffer Overflow
by LiquidWorm
By Source