Exploitdb Exploits
31,344 exploits tracked across all sources.
FreeBSD OpenSSH 3.5p1 - Remote Command Execution
by kingcope
Valve Steam Client Application 1559/1559 - Local Privilege Escalation
by LiquidWorm
HP OpenView Storage Data Protector <6.20 - Buffer Overflow
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.
by Core Security
RealityServer Web Services RTMP Server 3.1.1 build 144525.5 - Null Pointer Dereference Denial of Service
by Luigi Auriemma
Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities
by Aung Khant
Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Ubisoft CoGSManager ActiveX Control 1.0.0.23 - 'Initialize()' Method Stack Buffer Overflow
by Luigi Auriemma
Sybase Advantage Server 10.0.0.3 - 'ADS' Process Off-by-One Buffer Overflow
by Luigi Auriemma
WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections
by MaKyOtOx
Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities
by Aung Khant
Joomla! Component com_morfeoshow - 'idm' SQL Injection
by Th3.xin0x
WordPress Plugin Beer Recipes 1.0 - Cross-Site Scripting
by TheUzuki.'
Joomla! Component JoomlaXi - Persistent Cross-Site Scripting
by Karthik R
Azeotech Daqfactory < 5.84 - Authentication Bypass
AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a denial of service (system reboot or shutdown) via a signal.
by Knud Erik Hojgaard
IBM Web Application Firewall - Bypass
by Trustwave's SpiderLabs
Sitemagic CMS - 'SMTpl' Directory Traversal
by Andrea Bocchetti
Nodesforum - '_nodesforum_node' SQL Injection
by Andrea Bocchetti
BrewBlogger 2.3.2 - Multiple Vulnerabilities
by Brendan Coles
2Point Solutions - 'cmspages.php' SQL Injection
by Newbie Campuz
Manageengine Servicedesk Plus < 8.0.0.12 - Path Traversal
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME parameter. NOTE: this might overlap the US-CERT VU#543310 issue.
by xistence
By Source