Text Exploits
31,337 exploits tracked across all sources.
Linksys E1000/E1200/E3200 - Command Injection
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
by m-1-k-3
CVSS 8.3
Glpi - Improper Input Validation
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
by LiquidWorm
CVSS 7.5
Monkey CMS - Multiple Vulnerabilities
by Yashar shahinzadeh_ Mormoroth
et-chat - Privilege Escalation / Arbitrary File Upload
by MR.XpR
SPBAS Business Automation Software 2012 - XSS
SPBAS Business Automation Software 2012 has XSS.
by Christy Philip Mathew
CVSS 6.1
Havalite CMS 1.1.7 - Unauthenticated RCE
An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers to upload malicious PHP files via a crafted multipart/form-data POST request. Once uploaded, the attacker can access the file directly under havalite/tmp/files/, resulting in remote code execution.
by CWH Underground
WordPress Plugin Ultimate WordPress Auction Plugin 1.0 - Cross-Site Request Forgery
by expl0i13r
SPBAS Business Automation Software 2012 - CSRF
SPBAS Business Automation Software 2012 has CSRF.
by Christy Philip Mathew
CVSS 6.5
Fly-High CMS 2012-07-08 - Unrestricted Arbitrary File Upload
by CWH Underground
TaxiMonger for Android - 'name' HTML Injection
by Ismail Kaleem
LibrettoCMS 1.1.7 - Unauthenticated RCE
An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing attackers to upload files with misleading extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server without authentication.
by CWH Underground
Monkey < 1.4.0 - Access Control
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
by felipensp
Axis Media Control Activex Control - Access Control
The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwrite arbitrary files via a file path to the (1) StartRecord, (2) SaveCurrentImage, or (3) StartRecordMedia methods.
by Javier Repiso Sánchez
Ovislink Airlive Poe2600hd Firmware - Denial of Service
AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.
by Sánchez_ Lopez_ Castillo
CVSS 7.5
Grandstream Gxv Device Firmware < 1.0.4.43 - CSRF
Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users.
by Castillo
UI Airvision Firmware < 1.1.5 - Memory Corruption
Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
by Core Security
WordPress Plugin WP-SendSms 1.0 - Multiple Vulnerabilities
by expl0i13r
Network-weathermap .network Weathermap < 0.97 - Path Traversal
Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the mapname parameter in a show_config action.
by Anthony Dubuissez
Abeel Simple Php Agenda < 2.2.8 - SQL Injection
SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter.
by Anthony Dubuissez
mkCMS - 'index.php' Arbitrary PHP Code Execution
by CWH Underground
By Source