Text Exploits
31,337 exploits tracked across all sources.
Cyme ChartFX Client Server - ActiveX Control Array Indexing
by Francis Provencher
Template CMS <2.1.1 - CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php.
by High-Tech Bridge SA
phpMyChat Plus 1.94 RC1 - Multiple Vulnerabilities
by L0n3ly-H34rT
WordPress Plugin spider Calendar - Multiple Vulnerabilities
by D4NB4R
PhpTax 0.8 - RCE
PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec() function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under the web server's context. No authentication is required.
by Jean Pascal Pereira
ZenPhoto - 'admin-news-articles.php' Cross-Site Scripting
by Scott Herbert
Switchvox - Multiple HTML Injection Vulnerabilities
by Ibrahim El-Sayed
Omnistar Mailer - Multiple SQL Injections / HTML Injection Vulnerabilities
by Vulnerability Laboratory
AlamFifa CMS - 'user_name_cookie' SQL Injection
by L0n3ly-H34rT
IBM Lotus Notes Traveler 8.5.1.x - Multiple Input Validation Vulnerabilities
by MustLive
Smartfren Connex EC 1261-2 UI OUC - Local Privilege Escalation
by X-Cisadane
Jamf Casper Suite < 8.6 - CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action.
by Jacob Holcomb
WordPress Plugin ABC Test - 'id' Cross-Site Scripting
by Scott Herbert
ViArt Shop Evaluation 4.1 - Multiple Remote File Inclusions
by L0n3ly-H34rT
YingZhiPython - Directory Traversal / Arbitrary File Upload
by Larry Cashdollar
Cisco Wireless LAN Controller <6.0.200.0-7.0.112.0 - DoS
Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426.
by Daniel Smith
WordPress Plugin Token Manager - 'tid' Cross-Site Scripting
by TheCyberNuxbie
ViArt Shop Enterprise 4.1 - Arbitrary Command Execution
by LiquidWorm
ZEN Load Balancer - Multiple Vulnerabilities
by Brendan Coles
MF Gig Calendar - XSS
Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page.
by Chris Cooper
By Source