Exploitdb Exploits
31,339 exploits tracked across all sources.
Cannonbolt Portfolio Manager 1.0 - Multiple Vulnerabilities
by LiquidWorm
Sitecom Home Storage Center - Authentication Bypass
by Mattijs van Ommeren
web@all - Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities
by KedAns-Dz
OpenFiler 2.3 - Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities
by Brendan Coles
Kayako Fusion <4.50.1581 - XSS
Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, and possibly before 4.50.1581, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
by High-Tech Bridge
Mike Carr Flogr < 2.5.6 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.
by High-Tech Bridge
Extcalendar 2.0 - Multiple SQL Injections / HTML Injection Vulnerabilities
by Ashiyane Digital Security Team
QNAP Turbo NAS TS-1279U-RP - Multiple Path Injections
by Andrea Fabrizi
Cm3 CMS - 'search.asp' Multiple Cross-Site Scripting Vulnerabilities
by Crim3R
Sciretech (Multiple Products) - Multiple SQL Injections
by AkaStep
PHPFox 3.0.1 - 'ajax.php' Multiple Cross-Site Scripting Vulnerabilities
by Crim3R
Group-office Groupoffice < 4.0.89 - SQL Injection
SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.
by Chris Cooper
Atlassian Greenhopper < 5.9.8 - XSS
Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code.
by Hoyt LLC Research
CVSS 5.4
Sitemax Maestro - SQL Injection / Local File Inclusion
by AkaStep
Sitecom Home Storage Center - Directory Traversal
by Mattijs van Ommeren
Conceptronic Grab'n'Go Network Storage - Directory Traversal
by Mattijs van Ommeren
AV Arcade Free Edition - 'add_rating.php?id' Blind SQL Injection
by DaOne
Adobe Photoshop Cs6 - Memory Corruption
Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.
by Francis Provencher
By Source