Exploitdb Exploits
31,337 exploits tracked across all sources.
Zend Framework < 2.4.6 - XXE
The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.
by Dawid Golunski
Joomla! Component com_jem 2.1.4 - Multiple Vulnerabilities
by Martino Sani
Printer Pro 5.4.3 IOS - Persistent Cross-Site Scripting
by Taurus Omar
WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download
by Larry W. Cashdollar
WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download
by Larry W. Cashdollar
WordPress Plugin Recent Backups 0.7 - Arbitrary File Download
by Larry W. Cashdollar
WordPress Plugin Candidate Application Form 1.0 - Arbitrary File Download
by Larry W. Cashdollar
Apple Mac OSX Keychain - EXC_BAD_ACCESS Denial of Service
by Juan Sacco
Job Manager < 0.7.22 - XSS
Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the email field.
by Owais Mehtab
Microweber 1.0.3 - Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution
by LiquidWorm
Froxlor Server Management Panel 0.9.33.1 - MySQL Login Information Disclosure
by Dustin Dörr
phpFileManager 0.9.8 - Remote Command Execution
by hyp3rlinx
Sudo <1.8.15 - Privilege Escalation
sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."
by daniel svartman
Xceedium Xsuite - Open Redirect
Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.
by modzero
CVSS 6.1
Xceedium Xsuite - Hard-coded Credentials
Multiple hardcoded credentials in Xsuite 2.x.
by modzero
CVSS 9.8
Xceedium Xsuite - Path Traversal
Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ....// (quadruple dot double slash) in the logFile parameter.
by modzero
Xceedium Xsuite - XSS
Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter.
by modzero
By Source