Exploitdb Exploits
31,344 exploits tracked across all sources.
DATAC RealFlex RealWin <2.1 Build 6.1.10.10 - RCE
Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow.
by Luigi Auriemma
RealNetworks RealPlayer <14.0.2 - RCE
Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.
by Luigi Auriemma
PluggedOut Blog 1.9.9 - 'year' Cross-Site Scripting
by kurdish hackers team
Online store PHP script - Multiple Cross-Site Scripting / SQL Injections
by kurdish hackers team
Newsportal 0.37 - 'post.php' Cross-Site Scripting
by kurdish hackers team
Element-IT PowUpload 1.3 - Arbitrary File Upload
by Daniel Godoy
Douran Portal 3.9.7.8 - Info Disclosure
download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.
by AJAX Security Team
XOOPS 2.x - Multiple Cross-Site Scripting Vulnerabilities
by Aung Khant
Php < 5.3.5 - Denial of Service
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
by Maksymilian Arciemowicz
Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions
by LiquidWorm
WordPress Plugin Sodahead Polls 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
WordPress Plugin Rating-Widget 1.3.1 - Multiple Cross-Site Scripting Vulnerabilities
by Todor Donev
By Source