Text Exploits
31,386 exploits tracked across all sources.
Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)
by Nicolas Krassas
Microsoft Office XP - Remote code Execution
by Francis Provencher
Microsoft Windows Server <2008 Gold-SP1 - DoS
Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
by Core Security
vBTube 1.2.9 - 'vBTube.php' Multiple Cross-Site Scripting Vulnerabilities
by Mr.ThieF
PHP < 5.3.7 - Path Traversal and Arbitrary File Write via Multipart Form-Data Filename
The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
by Krzysztof Kotowicz
WebFileExplorer 3.6 - 'user' / 'pass' SQL Injection
by pentesters.ir
Joomla! Component Scriptegrator 1.5 - Local File Inclusion
by jdc
Joomla! Component Minitek FAQ Book 1.3 - 'id' SQL Injection
by kaMtiEz
Oracle HTTP Server - Cross-Site Scripting Header Injection
by Yasser ABOUKIR
Microsoft Lync Server 2010 - 'ReachJoin.aspx' Remote Command Injection
by Mark Lachniet
Subrion CMS 2.0.4 - Cross-Site Scripting via Poll Title Field
Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452.
by Karthik R
Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal
by White Hat Consultores
Subrion CMS 2.0.4 - SQL Injection via Admin Login Fields
SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) user name or (2) password field.
by Karthik R
Tele Data Contact Management Server - Directory Traversal
by AutoSec Tools
Simple Web Server 1.2 - Directory Traversal
by AutoSec Tools
Aastra IP Phone 9480i - Web Interface Data Disclosure
by Yakir Wizman
VLC media player <1.1.9 - DoS/Buffer Overflow
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
by TecR0c
WordPress Plugin GD Star Rating - 'votes' SQL Injection
by anonymous
By Source