Text Exploits
31,330 exploits tracked across all sources.
D-Link DIR-615 - Multiple Buffer Overflow Vulnerabilities
by Samuel Huntley
b374k 3.2.3/2.8 (Web Shell) - Cross-Site Request Forgery / Command Injection
by hyp3rlinx
R-Scripts Vacation Rental Script 7R - Multiple Vulnerabilities
by LiquidWorm
Wpfastestcache WP Fastest Cache < 0.8.4.9 - SQL Injection
The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.
by Kacper Szurek
CVSS 9.8
Huawei HG630a / HG630a-50 - Default SSH Admin Password on ADSL Modems
by Murat Sahin
TestLink 1.9.14 - Cross-Site Request Forgery
by Aravind C Ajayan_ Balagopal N
FreeType 2.6.1 - TrueType tt_sbit_decoder_load_bit_aligned Heap Out-of-Bounds Read
by Google Security Research
Google AdWords API PHP client library 6.2.0 - Arbitrary PHP Code Execution
by Dawid Golunski
Google AdWords 6.2.0 API client libraries - XML eXternal Entity Injection
by Dawid Golunski
eBay Magento CE 1.9.2.1 - Unrestricted Cron Script (Code Execution / Denial of Service)
by Dawid Golunski
SolarWinds Log and Event Manager/Trigeo SIM 6.1.0 - Remote Command Execution
by Chris Graham
WordPress Plugin My Calendar 2.4.10 - Multiple Vulnerabilities
by Mysticism
NXFilter 3.0.3 - Multiple Cross-Site Scripting Vulnerabilities
by hyp3rlinx
vBulletin 5 Connect <5.1.9 - Code Injection
The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.
by hhjj
FreeType 2.6.1 - TrueType tt_cmap14_validate Parsing Heap Out-of-Bounds Reads
by Google Security Research
Python 3.3 < 3.5 - 'product_setstate()' Out-of-Bounds Read
by John Leitch
Python 2.7 hotshot Module - 'pack_string' Heap Buffer Overflow (PoC)
by John Leitch
Python 2.7 - 'strop.replace()' Method Integer Overflow
by John Leitch
Samsung Galaxy S6 - DoS
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
by Google Security Research
CVSS 5.5
By Source