Exploitdb Exploits
31,344 exploits tracked across all sources.
Joomla! Component com_fireboard - 'Itemid' SQL Injection
by ViRuS Qalaa
Guestbook Script PHP - Cross-Site Scripting / HTML Injection
by AnTi SeCuRe
Adobe Reader <9.3.3 - RCE
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile (maxp) table.
by Ramz Afzar
Sports Accelerator Suite 2.0 - 'news_id' SQL Injection
by LiquidWorm
Microsoft Windows Kerberos - 'Pass The Ticket' Replay Security Bypass
by Emmanuel Bouillon
SmartCode ServerX VNC Server ActiveX 1.1.5.0 - 'scvncsrvx.dll' Denial of Service
by LiquidWorm
PHP <MailForm 1.2 - RCE
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.
by LoSt.HaCkEr
Get Tube <4.51 - SQL Injection
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Mr.P3rfekT
Edit-X PHP CMS - 'search_text' Cross-Site Scripting
by High-Tech Bridge SA
CMS Source - Multiple Input Validation Vulnerabilities
by High-Tech Bridge SA
Dave Robinson Rockbandcms - SQL Injection
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
by Affix
ServletExec - Directory Traversal / Authentication Bypass
by Stefano Di Paola
Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution
by Giorgio Fedon
Portable Document Format - Specification Signature Collision
by Florian Zumbiehl
Saurus CMS 4.7.0 - RCE
Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php.
by LoSt.HaCkEr
MybbCentral TagCloud 2.0 - 'Topic' HTML Injection
by 3ethicalhackers.com
KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting
by fdiskyou
clearBudget <0.9.8 - RCE
PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party
by Offensive
AoA Audio Extractor - Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)
by Dr_IDE
By Source