Text Exploits
31,386 exploits tracked across all sources.
WordPress Plugin WPEasyStats 1.8 - Remote File Inclusion
by Ben Schmidt
WordPress Plugin TheCartPress 1.1.1 - Remote File Inclusion
by Ben Schmidt
Relocate Upload < 0.20 - Remote Code Execution via abspath Parameter
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
by Ben Schmidt
WordPress Plugin Mini Mail Dashboard Widget 1.36 - Remote File Inclusion
by Ben Schmidt
WordPress Plugin Mailing List 1.3.2 - Remote File Inclusion
by Ben Schmidt
WordPress Plugin Filedownload 0.1 - 'download.php' Remote File Disclosure
by Septemb0x
WordPress Plugin Disclosure Policy 1.0 - Remote File Inclusion
by Ben Schmidt
WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion
by Ben Schmidt
Allwebmenus WordPress Plugin 1.1.3 - Remote Code Execution via abspath Parameter
PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
by Ben Schmidt
Toko Lite CMS 1.5.2 - HTTP Response Splitting / Cross-Site Scripting
by Gjoko Krstic
Toko Lite CMS 1.5.2 - 'edit.php' HTTP Response Splitting
by LiquidWorm
net4visions (Multiple Products) - 'dir' Multiple Cross-Site Scripting Vulnerabilities
by Gjoko Krstic
TimThumb < 2.0 - Remote Code Execution via Domain Whitelist Bypass
TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011.
by Ben Schmidt
Apple Mac OSX (Lion) - Directory Services Security Bypass
by Defence in Depth
Cisco TelePresence C Series, E/EX, MXP < TC 4.0.0/F9.1 - DoS via SIP Packet
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq46500.
by Sense of Security
Aspgwy Access 1.0 - 'matchword' Cross-Site Scripting
by kurdish hackers team
WordPress Plugin Count per Day 2.17 - SQL Injection
by Miroslav Stampar
phpRS 2.8.1 - Multiple SQL Injections / Cross-Site Scripting
by iM4n
ASP Basit Haber Script 1.0 - 'id' SQL Injection
by m3rciL3Ss
CMScout IBrowser TinyMCE Plugin <1.4.1 - Path Traversal
Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. NOTE: some of these details are obtained from third party information.
by LiquidWorm
Ay Computer (Multiple Products) - Multiple SQL Injections
by m3rciL3Ss
By Source