Exploitdb Exploits
31,344 exploits tracked across all sources.
Wireshark 1.4.5 - DoS
The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbitrary TCP traffic.
by rouli
WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)
by Saif
Adobe Reader/Acrobat 10.0.1 - Denial of Service
by Soroush Dalili
miniblog 1.0 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Free Simple CMS 1.0 - Multiple Vulnerabilities
by High-Tech Bridge SA
IBM WebSphere Application Server <7.0.0.13 - CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.
by Core Security
Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)
by Nicolas Krassas
Microsoft Office XP - Remote code Execution
by Francis Provencher
Microsoft Windows Server <2008 Gold-SP1 - DoS
Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
by Core Security
vBTube 1.2.9 - 'vBTube.php' Multiple Cross-Site Scripting Vulnerabilities
by Mr.ThieF
PHP <5.3.7 - Path Traversal
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
by Krzysztof Kotowicz
WebFileExplorer 3.6 - 'user' / 'pass' SQL Injection
by pentesters.ir
Joomla! Component Scriptegrator 1.5 - Local File Inclusion
by jdc
Joomla! Component Minitek FAQ Book 1.3 - 'id' SQL Injection
by kaMtiEz
Oracle HTTP Server - Cross-Site Scripting Header Injection
by Yasser ABOUKIR
Microsoft Lync Server 2010 - 'ReachJoin.aspx' Remote Command Injection
by Mark Lachniet
Intelliants Subrion Cms - XSS
Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452.
by Karthik R
Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal
by White Hat Consultores
Intelliants Subrion Cms - SQL Injection
SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) user name or (2) password field.
by Karthik R
Tele Data Contact Management Server - Directory Traversal
by AutoSec Tools
Simple Web Server 1.2 - Directory Traversal
by AutoSec Tools
By Source