Exploitdb Exploits
31,344 exploits tracked across all sources.
Nuke Evolution Xtreme 2.0 - Local File Inclusion / SQL Injection
by KedAns-Dz
First Escort Marketing CMS - Multiple SQL Injections Vulnerabilities
by NoNameMT
DynMedia Pro Web CMS 4.0 - Local File Disclosure
by Mbah_Semar
Dolibarr ERP/CRM 3.0 - Local File Inclusion / Cross-Site Scripting
by AutoSec Tools
4Images 1.7.9 - Multiple Vulnerabilities
by High-Tech Bridge SA
ZenPhoto 1.4.0.3 - '_zp_themeroot' Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
SyCtel Design - 'menu' Multiple Local File Inclusions
by Ashiyane Digital Security Team
Yahoo! CD Player - ActiveX Control 'open()' Method Stack Buffer Overflow
by shinnai
Automagick Tube Script 1.4.4 - 'module' Cross-Site Scripting
by Kurd-Team
Adobe Flash Player
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.
by Abysssec
IBM Tivoli Directory Server - Memory Corruption
Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) allows remote attackers to execute arbitrary code via a crafted LDAP request. NOTE: some of these details are obtained from third party information.
by Francis Provencher
WordPress Plugin WP-StarsRateBox 1.1 - 'j' SQL Injection
by High-Tech Bridge SA
webSPELL 4.2.2a - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections
by eXeSoul
dalbum 1.43 - Multiple Vulnerabilities
by High-Tech Bridge SA
Dalbum 1.43 - 'editini.php' Cross-Site Scripting
by High-Tech Bridge SA
CRESUS - 'recette_detail.php' SQL Injection
by GrayHatz Security Group
ChatLakTurk PHP Botlu Video - 'ara.php' Cross-Site Scripting
by kurdish hackers team
Oracle JD Edwards EnterpriseOne <8.98.4.1 - Info Disclosure
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.
by Juan Manuel Garcia
Oracle JD Edwards EnterpriseOne <8.98.4.1 - Info Disclosure
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.
by Juan Manuel Garcia
Oracle JD Edwards EnterpriseOne <8.98.4.1 - Info Disclosure
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.
by Juan Manuel Garcia
Oracle JD Edwards EnterpriseOne <8.98.4.1 - Info Disclosure
Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.
by Juan Manuel Garcia
By Source