Exploitdb Exploits
31,394 exploits tracked across all sources.
Microsoft Windows - Privilege Escalation
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application, aka "Win32k Null Pointer De-reference Vulnerability."
by KiDebug
CVSS 7.1
jara 1.6 - SQL Injection
Jara 1.6 has a SQL injection vulnerability.
by muuratsalo
CVSS 9.8
InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin)
by EjRaM HaCkEr
Oracle AutoVue 20.0.1 AutoVueX - ActiveX Control SaveViewStateToFile
by rgod
Dell Quest One Password Manager - Unauthenticated Information Disclosure via CAPTCHA Bypass
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters.
by Johnny Bravo
OCS Inventory NG < 2.0.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
by Nicolas DEROUET
UnrealIRCd 3.2.8.1 - Local Configuration Stack Overflow
by DiGMi
Oracle DataDirect - Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Buffer Overflows (PoC)
by rgod
Uiga Personal Portal - Multiple Vulnerabilities
by Eyup CELIK
Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
osCommerce - Arbitrary File Upload / File Disclosure
by indoushka
Innovate Portal 2.0 - 'cat' Cross-Site Scripting
by Eyup CELIK
fims File Management System 1.2.1a - Multiple Vulnerabilities
by Skraps
Metasploit Web UI 4.1.0 - Persistent Cross-Site Scripting
by Stefan Schurtz
Splunk 4.1.6 - 'segment' Cross-Site Scripting
by Filip Palian
Splunk 4.1.6 Web Component - Remote Denial of Service
by Filip Palian
Pre Studio Business Cards Designer - SQL Injection via Page ID Parameter
SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter.
by dr_zig
Yet Another CMS 1.0 - SQL Injection / Cross-Site Scripting
by Stefan Schurtz
WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure
by Lagripe-Dz & Mca-Crb
Boonex Dolphin 6.1 - 'get_list.php' SQL Injection
by Yuri Goltsev
By Source