Text Exploits
31,330 exploits tracked across all sources.
Wpsymposium WP Symposium < 15.7 - SQL Injection
SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php.
by PizzaHatHacker
BigTree CMS 4.2.3 - (Authenticated) SQL Injection
by Curesec Research Team
Cisco Unified Communications Manager - Information Disclosure
Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.
by Bernhard Mueller
ActiveMQ web shell upload
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
by David Jorm
CVSS 9.8
NetKit FTP Client (Ubuntu 14.04) - Crash/Denial of Service (PoC)
by TUNISIAN CYBER
Security IP Camera Star Vision DVR - Authentication Bypass
by Meisam Monsef
Microsoft Windows 2003 Server - Access Control
The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not prevent DCE/RPC connection reflection, which allows local users to gain privileges via a crafted application, aka "Windows RPC Elevation of Privilege Vulnerability."
by monoxgas
Zend Framework < 2.4.6 - XXE
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.
by Dawid Golunski
Joomla! Component com_jem 2.1.4 - Multiple Vulnerabilities
by Martino Sani
Printer Pro 5.4.3 IOS - Persistent Cross-Site Scripting
by Taurus Omar
WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download
by Larry W. Cashdollar
WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download
by Larry W. Cashdollar
WordPress Plugin Recent Backups 0.7 - Arbitrary File Download
by Larry W. Cashdollar
By Source