Text Exploits
31,386 exploits tracked across all sources.
Plogger 1.0 RC1 - 'gallery_name' Cross-Site Scripting
by High-Tech Bridge SA
Microsoft Host Integration Server 2004 SP1, 2006 SP1, 2009, 2010 - Denial of Service via Crafted TCP or UDP Traffic
Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."
by Luigi Auriemma
WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities
by MustLive
Etki Video PRO 2.0 - 'kategori.asp?cat' SQL Injection
by Kurd-Team
Etki Video PRO 2.0 - 'izle.asp?id' SQL Injection
by Kurd-Team
MIT Kerberos 5 1.7-1.9 - Remote Code Execution via Crafted Password Change Request
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
by Felipe Ortega
tmux 1.3 and 1.4 - Privilege Escalation via -S Command-Line Option
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
by ph0x90bic
Point Market System 3.1x vBulletin plugin - SQL Injection
by Net.Edit0r
Joomla! Component joomlacontenteditor - Blind SQL Injection
by eidelweiss
vTiger CRM 5.2.1 - 'sortfieldsjson.php' Local File Inclusion
by John Leitch
viscacha 0.8.1 - Multiple Vulnerabilities
by High-Tech Bridge SA
PrestaShop 1.3.6 - 'cms.php' Remote File Inclusion
by KedAns-Dz
phpcollab 2.5 - Multiple Vulnerabilities
by High-Tech Bridge SA
1024 CMS 1.1.0 Beta - Multiple Input Validation Vulnerabilities
by QSecure & Demetris Papapetrou
FiberHome HG-110 - Cross-Site Scripting / Directory Traversal
by Zerial
S40 CMS 0.4.2 - Unauthenticated Path Traversal via Index.php p Parameter
S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending traversal sequences and a null byte to bypass file extension checks.
by Osirys
vTiger CRM 5.2.1 - 'vtigerservice.php' Cross-Site Scripting
by AutoSec Tools
eGroupWare 1.8.1 - 'test.php' Cross-Site Scripting
by AutoSec Tools
Omer Portal 3.220060425 - 'arama_islem.asp' Cross-Site Scripting
by kurdish hackers team
qooxdoo 1.3 - Cross-Site Scripting via Callback Parameter
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
by AutoSec Tools
By Source