Text Exploits

31,330 exploits tracked across all sources.

Sort: Activity Stars
EIP-2026-104425 EXPLOITDB text
SedSystems D3 Decimator - Multiple Vulnerabilities
by prdelka
CVE-2015-8636 EXPLOITDB HIGH text VERIFIED
Adobe Air < 20.0.0.204 - Memory Corruption
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8459, CVE-2015-8460, and CVE-2015-8645.
by Google Security Research
CVSS 8.8
EIP-2026-114243 EXPLOITDB text
WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities
by Rahul Pratap Singh
CVE-2013-7285 EXPLOITDB CRITICAL text
Xstream API <1.4.6, 1.4.10 - RCE
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
by Brian D. Hysell
CVSS 9.8
EIP-2026-101168 EXPLOITDB text
AVM FRITZ!Box < 6.30 - Remote Buffer Overflow
by RedTeam Pentesting
EIP-2026-101842 EXPLOITDB text
MediaAccess TG788vn - File Disclosure
by 0x4148
CVE-2015-8398 EXPLOITDB MEDIUM text
Atlassian Confluence <5.8.17 - XSS
Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check.
by Sebastian Perez
CVSS 6.1
CVE-2015-8399 EXPLOITDB MEDIUM text
Atlassian Confluence <5.8.17 - Info Disclosure
Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.
by Sebastian Perez
CVSS 4.3
EIP-2026-112132 EXPLOITDB text
Simple PHP Polling System - Multiple Vulnerabilities
by WICS
EIP-2026-111077 EXPLOITDB text
PHPIPAM 1.1.010 - Multiple Vulnerabilities
by Mickael Dorigny
EIP-2026-110055 EXPLOITDB text
Online Airline Booking System - Multiple Vulnerabilities
by Manish Tanwar
EIP-2026-103627 EXPLOITDB text VERIFIED
pdfium IsFlagSet (v8 memory management) - SIGSEGV
by Google Security Research
CVE-2015-6787 EXPLOITDB text VERIFIED
Google Chrome < 46.0.2490.86 - Denial of Service
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
by Google Security Research
CVE-2015-6787 EXPLOITDB text VERIFIED
Google Chrome < 46.0.2490.86 - Denial of Service
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
by Google Security Research
CVE-2015-6787 EXPLOITDB text VERIFIED
Google Chrome < 46.0.2490.86 - Denial of Service
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
by Google Security Research
EIP-2026-114870 EXPLOITDB text VERIFIED
Advanced Encryption Package - Buffer Overflow (Denial of Service) (PoC)
by Vishnu
EIP-2026-110220 EXPLOITDB text VERIFIED
Open Audit - SQL Injection
by Rahul Pratap Singh
CVE-2015-7556 EXPLOITDB HIGH text
DeleGate 9.9.13 - Privilege Escalation
DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.
by Larry W. Cashdollar
CVSS 7.8
EIP-2026-114839 EXPLOITDB text
AccessDiver 4.301 - Buffer Overflow
by hyp3rlinx
EIP-2026-111776 EXPLOITDB text VERIFIED
Rips Scanner 0.5 - 'code.php' Local File Inclusion
by Ashiyane Digital Security Team
EIP-2026-105441 EXPLOITDB text
Beezfud - Remote Code Execution
by Ashiyane Digital Security Team
EIP-2026-111210 EXPLOITDB text
PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery
by Curesec Research Team
EIP-2026-107489 EXPLOITDB text
Grawlix 1.0.3 - Cross-Site Request Forgery
by Curesec Research Team
EIP-2026-105475 EXPLOITDB text
Bigware Shop 2.3.01 - Multiple Local File Inclusions
by bd0rk
EIP-2026-105223 EXPLOITDB text
Arastta 1.1.5 - SQL Injection
by Curesec Research Team