Text Exploits
31,337 exploits tracked across all sources.
PhonerLite <2.15 - Info Disclosure
The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.
by Jason Ostrom
CVSS 7.5
Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit)
by Brandon Perry
Ajax Pagination (twitter Style) <1.1 - Path Traversal
Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the loop parameter in an ajax_navigation action to wp-admin/admin-ajax.php.
by Glyn Wintle
CVSS 7.5
plexusCMS 0.5 - Cross-Site Scripting / Remote Shell / Credentials Leak
by neglomaniac
EMC Cloud Tiering Appliance Software - Information Disclosure
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.
by Brandon Perry
Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities
by Vulnerability-Lab
PhotoWIFI Lite 1.0 iOS - Multiple Vulnerabilities
by Vulnerability-Lab
Primo Interactive CMS - 'pcm.cgi' Remote Command Execution
by Felipe Andrian Peixoto
iStArtApp FileXChange 6.2 iOS - Multiple Vulnerabilities
by Vulnerability-Lab
Joomla! Component Kunena 3.0.4 - Persistent Cross-Site Scripting
by Qoppa
Sonicwall Email Security Appliance < 7.4.5 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the uploadPatch parameter to the System/Advanced page (settings_advanced.html) or (2) the uploadLicenses parameter in the License management (settings_upload_dlicense.html) page.
by Vulnerability-Lab
Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities
by Vulnerability-Lab
ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities
by Vulnerability-Lab
Easy FileManager 1.1 iOS - Multiple Vulnerabilities
by Vulnerability-Lab
OpenCart 1.5.6.1 - 'openbay' Multiple SQL Injections
by Saadi Siddiqui
InterWorx Web Control Panel <5.0.14 - SQL Injection
SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the (1) NodeWorx , (2) SiteWorx, or (3) Resellers interface, as demonstrated by the "or" key in a pgn8state object in an i object in a JSON object.
by Eric Flokstra
Apache CouchDB <1.5.0 - DoS
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.
by Krusty Hack
Alliedtelesis Img646bd Firmware - Authentication Bypass
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.
by Groundworks Technologies
DotItYourself - 'dot-it-yourself.cgi' Remote Command Execution
by Felipe Andrian Peixoto
Beheer Systeem - 'pbs.cgi' Remote Command Execution
by Felipe Andrian Peixoto
By Source