Text Exploits
31,337 exploits tracked across all sources.
VeriFone VeriCentre Web Console <2.2.36 - SQL Injection
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.
by Cory Eubanks
ZPanel <10.0.1 - SQL Injection
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.
by pcsjj
ZPanel <10.0.1 - XSS
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/.
by pcsjj
ZPanel 10.0.1- - CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create new FTP users via a CreateFTP action in the ftp_management module to the default URI, (2) conduct cross-site scripting (XSS) attacks via the inFullname parameter in an UpdateAccountSettings action in the my_account module to zpanel/, or (3) conduct SQL injection attacks via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.
by pcsjj
ZPanel 10.0.1 - Info Disclosure
ZPanel 10.0.1 has insufficient entropy for its password reset process.
by pcsjj
CVSS 9.8
CheckPoint/Sofaware Firewall - Multiple Vulnerabilities
by Procheckup
Sysax FTP Automation Server 5.33 - Local Privilege Escalation
by Craig Freyman
Adobe Reader 11.0.0 - Stack Overflow Crash (PoC)
by coolkaveh
WordPress Plugin Spider Catalog 1.1 - HTML Code Injection / Cross-Site Scripting
by D4NB4R
AWAuctionScript CMS - Multiple Remote Vulnerabilities
by X-Cisadane
Joomla! Component Parcoauto - 'idVeicolo' SQL Injection
by Andrea Bocchetti
All Video Gallery <1.2.0 - Info Disclosure
Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecified impact and attack vectors.
by Ashiyane Digital Security Team
vBulletin ChangUonDyU Advanced Statistics - SQL Injection
by Juno_okyo
DCForum - 'auth_user_file.txt' File Multiple Information Disclosure Vulnerabilities
by r45c4l
Siemens SiPass MP2.6 - RCE
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack.
by Lucas Apa
RealPlayer 15.0.6.14(.3g2) - 'WriteAV' Crash (PoC)
by coolkaveh
WordPress Plugin bbPress - Multiple Vulnerabilities
by Dark-Puzzle
Joomla! Component Spider Catalog 1.1 - 'Product_ID' SQL Injection
by D4NB4R
Endpoint Protector 4.0.4.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities
by CYBSEC Labs
By Source