Exploitdb Exploits

50,076 exploits tracked across all sources.

Sort: Activity Stars
CVE-2003-0727 EXPLOITDB python
Oracle 9i Database Release 2 - Buffer Overflow
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
by Charles Dardaman
EIP-2026-118407 EXPLOITDB python VERIFIED
Disk Pulse Enterprise 10.0.12 - GET Buffer Overflow (SEH)
by sickness
CVE-2017-11281 EXPLOITDB CRITICAL text VERIFIED
Adobe Flash Player < 26.0.0.151 - Memory Corruption in Text Handling
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
by Google Security Research
CVSS 9.8
CVE-2017-11282 EXPLOITDB CRITICAL text VERIFIED
Adobe Flash Player < 26.0.0.151 - Memory Corruption in MP4 Atom Parser
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
by Google Security Research
CVSS 9.8
CVE-2017-11281 EXPLOITDB CRITICAL text VERIFIED
Adobe Flash Player < 26.0.0.151 - Memory Corruption in Text Handling
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
by Google Security Research
CVSS 9.8
CVE-2017-11610 EXPLOITDB HIGH ruby VERIFIED
Supervisor XML-RPC Authenticated Remote Code Execution
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.
by Metasploit
CVSS 8.8
CVE-2017-11120 EXPLOITDB CRITICAL text VERIFIED
Broadcom BCM4355C0 Wi-Fi Firmware 9.44.78.27.0.1.56 - Buffer Overflow via Malformed RRM Neighbor Report Frame
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.
by Google Security Research
CVSS 9.8
EIP-2026-101765 EXPLOITDB text
HBGK DVR 3.0.0 build20161206 - Authentication Bypass
by RAT - ThiefKing
CVE-2017-14627 EXPLOITDB HIGH python VERIFIED
CyberLink LabelPrint 2.5 - Stack-based Buffer Overflow via LPP Project File Parameters
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
by f3ci
CVSS 7.8
CVE-2017-18486 EXPLOITDB HIGH text
Jitbit Helpdesk <9.0.3 - Privilege Escalation
Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.
by Kc57
CVSS 7.2
EIP-2026-112440 EXPLOITDB perl
Stock Photo Selling 1.0 - SQL Injection
by Ihsan Sencan
EIP-2026-111966 EXPLOITDB text
Secure E-commerce Script 1.02 - 'sid' SQL Injection
by 8bitsec
EIP-2026-110651 EXPLOITDB text
PHP Auction Ecommerce Script 1.6 - SQL Injection
by 8bitsec
EIP-2026-109624 EXPLOITDB text
Multi Level Marketing - SQL Injection
by Ihsan Sencan
EIP-2026-109094 EXPLOITDB text
Lending And Borrowing - 'pid' SQL Injection
by Ihsan Sencan
CVE-2017-14704 EXPLOITDB HIGH text
Claydip Laravel Airbnb Clone 1.0 - RCE
Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile.
by Ihsan Sencan
CVSS 8.8
CVE-2017-14703 EXPLOITDB CRITICAL perl
Cash Back Comparison Script 1.0 - SQL Injection
SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.
by Ihsan Sencan
CVSS 9.8
CVE-2017-14702 EXPLOITDB CRITICAL python
ERS Data System <1.8.1.0 - Code Injection
ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.
by West Shepherd
CVSS 9.8
EIP-2026-118411 EXPLOITDB ruby VERIFIED
Disk Pulse Enterprise 9.9.16 - GET Buffer Overflow (Metasploit)
by Metasploit
CVE-2017-8740 EXPLOITDB HIGH html VERIFIED
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764.
by Google Security Research
CVSS 7.5
CVE-2017-11764 EXPLOITDB HIGH html VERIFIED
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, and CVE-2017-8756.
by Google Security Research
CVSS 7.5
CVE-2017-8755 EXPLOITDB HIGH html VERIFIED
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8649, CVE-2017-8660, CVE-2017-8729, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8756, and CVE-2017-11764.
by Google Security Research
CVSS 7.5
CVE-2017-8729 EXPLOITDB HIGH html VERIFIED
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8649, CVE-2017-8660, CVE-2017-8738, CVE-2017-8740, CVE-2017-8741, CVE-2017-8748, CVE-2017-8752, CVE-2017-8753, CVE-2017-8755, CVE-2017-8756, and CVE-2017-11764.
by Google Security Research
CVSS 7.5
CVE-2017-14618 EXPLOITDB MEDIUM text
phpmyfaq < 2.9.8 - Cross-Site Scripting via Questions Field in Add New FAQ Action
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
by Ishaq Mohammed
CVSS 4.8
CVE-2017-1000251 EXPLOITDB HIGH text
Linux Kernel 2.6.32-4.13.1 - Remote Code Execution via Bluetooth L2CAP Configuration Response
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
by Marcin Kozlowski
CVSS 8.0