Text Exploits
31,386 exploits tracked across all sources.
MailForm 1.2 - Remote Code Execution via Theme Parameter
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.
by LoSt.HaCkEr
Get Tube < 4.51 - SQL Injection via video.php id Parameter
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Mr.P3rfekT
Edit-X PHP CMS - 'search_text' Cross-Site Scripting
by High-Tech Bridge SA
CMS Source - Multiple Input Validation Vulnerabilities
by High-Tech Bridge SA
Dave Robinson Rockbandcms - SQL Injection
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
by Affix
ServletExec - Directory Traversal / Authentication Bypass
by Stefano Di Paola
Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution
by Giorgio Fedon
Portable Document Format - Specification Signature Collision
by Florian Zumbiehl
Saurus CMS 4.7.0 - Remote Code Execution via Class Path Parameter
Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php.
by LoSt.HaCkEr
MybbCentral TagCloud 2.0 - 'Topic' HTML Injection
by 3ethicalhackers.com
KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting
by fdiskyou
clearBudget 0.9.8 - Remote Code Execution via actionPath Parameter
PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party
by Offensive
AoA Audio Extractor - Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)
by Dr_IDE
Microsoft Windows Vista/Server 2008/7 Privilege Escalation via Registry Key ACL Misconfiguration
The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."
by Cesar Cerrudo
CVSS 7.8
Windows Kernel win32k.sys - Privilege Escalation via Pseudo-Handle Validation Bypass
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
by Core Security
SyntaxCMS - 'rows_per_page' SQL Injection
by High-Tech Bridge SA
Nasim Guest Book 1.2 - Cross-Site Scripting via Page Parameter
Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
by Moudi
com_teams 1_1028_100809_1711 - SQL Injection via PlayerID Parameter
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php.
by Salvatore Fresta
Amblog 1.0 for Joomla! - SQL Injection via articleid or catid Parameter
Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) articleid or (2) catid parameter to index.php.
by Salvatore Fresta
Preation Eden Platform 27.7.2010 - Multiple HTML Injection Vulnerabilities
by High-Tech Bridge SA
By Source