Exploitdb Exploits

31,344 exploits tracked across all sources.

Sort: Activity Stars
CVE-2011-0222 EXPLOITDB text
Apple Safari < 5.0.5 - Memory Corruption
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
by Nikita Tarakanov
EIP-2026-113003 EXPLOITDB text VERIFIED
vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection
by fb1h2s
EIP-2026-112529 EXPLOITDB text VERIFIED
Synergy Software - 'id' SQL Injection
by Ehsan_Hp200
EIP-2026-109436 EXPLOITDB text
Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery
by Crazy_Hacker
EIP-2026-108794 EXPLOITDB text
Joomla! Component mod_spo - SQL Injection
by SeguridadBlanca
CVE-2011-4336 EXPLOITDB MEDIUM text VERIFIED
Tiki Wiki CMS Groupware 7.0 - XSS
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
by High-Tech Bridge SA
CVSS 6.1
EIP-2026-108518 EXPLOITDB text VERIFIED
Joomla! Component com_rsappt_pro2 - Local File Inclusion
by Don Tukulesto
EIP-2026-108187 EXPLOITDB text VERIFIED
Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities
by YGN Ethical Hacker Group
EIP-2026-106318 EXPLOITDB text VERIFIED
Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities
by Patrick Webster
CVE-2011-2260 EXPLOITDB text
Oracle Sun Products Suite 2.1.1 - Info Disclosure
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.
by Sense of Security
EIP-2026-103539 EXPLOITDB text
Lotus Domino SMTP Router & Email Server and Client - Denial of Service
by anonymous
CVE-2011-0041 EXPLOITDB text VERIFIED
Microsoft GDI+ - RCE
Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted EMF image, aka "GDI+ Integer Overflow Vulnerability."
by Abysssec
EIP-2026-105559 EXPLOITDB text VERIFIED
BlueSoft (Multiple Products) - Multiple SQL Injections
by Lazmania61
EIP-2026-101333 EXPLOITDB text VERIFIED
Iskratel SI2000 Callisto 821+ - Cross-Site Request Forgery / HTML Injection
by MustLive
EIP-2026-105562 EXPLOITDB text VERIFIED
BlueSoft Social Networking CMS - SQL Injection
by Lazmania61
EIP-2026-108766 EXPLOITDB text VERIFIED
Joomla! Component Juicy Gallery - 'picId' SQL Injection
by SOLVER
EIP-2026-108654 EXPLOITDB text VERIFIED
Joomla! Component Foto - 'id_categoria' SQL Injection
by SOLVER
EIP-2026-108616 EXPLOITDB text VERIFIED
Joomla! Component Controller - 'Itemid' SQL Injection
by SOLVER
EIP-2026-108457 EXPLOITDB text VERIFIED
Joomla! Component com_newssearch - SQL Injection
by Robert Cooper
EIP-2026-108369 EXPLOITDB text VERIFIED
Joomla! Component com_hospital - SQL Injection
by SOLVER
EIP-2026-106692 EXPLOITDB text VERIFIED
Easy Estate Rental - 's_location' SQL Injection
by Lazmania61
EIP-2026-105309 EXPLOITDB text VERIFIED
Auto Web Toolbox - 'id' SQL Injection
by Lazmania61
EIP-2026-105044 EXPLOITDB text VERIFIED
AJ Classifieds - 'listingid' SQL Injection
by Lazmania61
EIP-2026-110569 EXPLOITDB text
PG eLms Pro vDEC_2007_01 - Multiple Blind SQL Injections
by LiquidWorm
EIP-2026-110568 EXPLOITDB text
PG eLms Pro vDEC_2007_01 - 'contact_us.php' Multiple POST Cross-Site Scripting Vulnerabilities
by LiquidWorm