Text Exploits
31,337 exploits tracked across all sources.
Piwigo < 2.4.6 - Path Traversal
Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter.
by LiquidWorm
Netgear router <1.0.0.36 - Command Injection
An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted input to the pppoe_username parameter. This flaw allows full compromise of the device and may persist across reboots unless configuration is restored.
by m-1-k-3
CVSS 7.2
Alt-N MDaemon WorldClient And WebAdmin - Cross-Site Request Forgery
by QSecure
Scripts Genie Hot Scripts Clone - 'showcategory.php?cid' SQL Injection
by Easy Laster
USB Sharp 1.3.4 iPad iPhone - Multiple Vulnerabilities
by Vulnerability-Lab
MIMEsweeper For SMTP - Multiple Cross-Site Scripting Vulnerabilities
by Anastasios Monachos
SAP Netweaver - Buffer Overflow
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
by Core Security
CVSS 9.8
Scripts Genie Top Sites - 'out.php?id' SQL Injection
by 3spi0n
Scripts Genie Games Site Script - 'index.php?id' SQL Injection
by 3spi0n
Scripts Genie Gallery Personals - 'gallery.php?L' SQL Injection
by 3spi0n
Scripts Genie Domain Trader - 'catalog.php?id' SQL Injection
by 3spi0n
ChillyCMS 1.3.0 - Multiple Vulnerabilities
by Abhi M Balakrishnan
Tp-link Tl-wr841n Firmware - Path Traversal
Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter.
by m-1-k-3
Edimax EW-7206-APg and EW-7209APg - Multiple Vulnerabilities
by m-1-k-3
Raidsonic NAS - Command Injection
An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the timeZone parameter of a POST request, allowing remote attackers to inject arbitrary shell commands.
by m-1-k-3
SonicWALL OEM Scrutinizer 9.5.2 - Multiple Vulnerabilities
by Vulnerability-Lab
Imagely Nextgen Gallery - Information Disclosure
NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability
by Henrique Montenegro
CVSS 7.5
Ultra Light Forum - Persistent Cross-Site Scripting
by cr4wl3r
Transferable Remote 1.1 iPad iPhone - Multiple Vulnerabilities
by Vulnerability-Lab
OpenPLI 3.0 Beta (OpenPLi-beta-dm7000-20130127-272) - Multiple Vulnerabilities
by m-1-k-3
By Source