Exploitdb Exploits
31,344 exploits tracked across all sources.
Microsoft WINS - Privilege Escalation
WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."
by Core Security
Vasthtml Forumpress < 1.7.4 - SQL Injection
SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action.
by Miroslav Stampar
TomatoCart 1.1 - (Authenticated) Local File Inclusion
by brain[pillow]
Papoo CMS Light 4.0 - Multiple Cross-Site Scripting Vulnerabilities
by Stefan Schurtz
Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting
by Gustavo Roberto
WordPress Plugin Tune Library 2.17 - SQL Injection
by Miroslav Stampar
Xataface WebAuction and Xataface Librarian DB - Multiple Vulnerabilities
by SecPod Research
WordPress Plugin WP-Filebase Download Manager 0.2.9 - SQL Injection
by Miroslav Stampar
WordPress Event Registration <5.32 - SQL Injection
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the event_id parameter in a register action.
by serk
WordPress Plugin A to Z Category Listing 1.3 - SQL Injection
by Miroslav Stampar
MYRE Real Estate Software - SQL Injection
SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter.
by SecPod Research
Vmware Springsource Spring Security < 2.0.6 - Code Injection
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
by David Mas
Wireshark <1.6.2 - DoS
Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."
by Wireshark
WordPress Plugin Paid Downloads 2.01 - SQL Injection
by Miroslav Stampar
WordPress Plugin Community Events 1.2.1 - SQL Injection
by Miroslav Stampar
Pluck CMS 4.7 - Multiple Local File Inclusion / File Disclosure Vulnerabilities
by Bl4k3
In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection
by SubhashDasyam
By Source