Text Exploits
31,386 exploits tracked across all sources.
Church Management System 1.0 - 'search' SQL Injection (Unauthenticated)
by Erwin Krazek
Budget and Expense Tracker System 1.0 - Authenticated Bypass
by Prunier Charles-Yves
T-Soft E-Commerce 4 - change 'admin credentials' Cross-Site Request Forgery (CSRF)
by Alperen Ergel
Simple Attendance System 1.0 - Authenticated bypass
by Abdullah Khawaja
Seowon 130-SLC Firmware < 2021-09-15 - Remote Code Execution via queriesCnt Parameter
Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.
by Aryan Chehreghani
CVSS 9.8
Support Board 3.3.3 - 'Multiple' SQL Injection (Unauthenticated)
by John Jefferson Li
Active WebCam 11.5 - Code Injection
Active WebCam 11.5 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the misconfigured service path by placing malicious executables in specific directory locations to gain administrative access.
by Salman Asad
CVSS 7.8
Men Salon Management System 1.0 - Multiple Vulnerabilities
by Aryan Chehreghani
ECOA Building Automation System - Weak Default Credentials
by Neurogenesia
ECOA Building Automation System - Remote Privilege Escalation
by Neurogenesia
ECOA Building Automation System - Path Traversal Arbitrary File Upload
by Neurogenesia
ECOA Building Automation System - Local File Disclosure
by Neurogenesia
ECOA Building Automation System - Directory Traversal Content Disclosure
by Neurogenesia
ECOA Building Automation System - Cookie Poisoning Authentication Bypass
by Neurogenesia
ECOA Building Automation System - Configuration Download Information Disclosure
by Neurogenesia
ECOA Building Automation System - Arbitrary File Deletion
by Neurogenesia
ECOA Building Automation System - 'multiple' Cross-Site Request Forgery (CSRF)
by Neurogenesia
ECOA Building Automation System - Hard-coded Credentials SSH Access
by Neurogenesia
ECOA Building Automation System - Missing Encryption Of Sensitive Information
by Neurogenesia
Bus Pass Management System 1.0 - 'adminname' Stored Cross-Site Scripting (XSS)
by Emre Aslan
WordPress Plugin WP Sitemap Page 1.6.4 - Stored Cross-Site Scripting (XSS)
by Nikhil Kapoor
Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation
Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.
by Salman Asad
CVSS 7.8
Bus Pass Management System v1.0 - Info Disclosure
An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information.
by sudoninja
CVSS 6.5
antminer_monitor 0.50.0 - Use of Hard-coded Credentials in Flask Settings File
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static.
by Vulnz
CVSS 9.8
By Source