Exploitdb Exploits
50,076 exploits tracked across all sources.
UTStar WA3002G4 ADSL Broadband Modem - Auth Bypass
An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi, and password.cgi.
by Gem George
CVSS 9.8
Lockstep Backup for Workgroups 4.0.3 - Remote Buffer Overflow (Metasploit)
by James Fitts
WellinTech KingSCADA < 3.1.2.13 - Remote Code Execution via Crafted Packet
Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.
by James Fitts
haneWIN DNS Server 1.5.3 - Remote Buffer Overflow (Metasploit)
by James Fitts
EMC AlphaStor 4.0 <build 910 - Buffer Overflow
Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
by James Fitts
EMC AlphaStor Device Manager - Opcode 0x72 Buffer Overflow (Metasploit)
by James Fitts
Cloudview NMS 2.00b - Writable Directory Traversal Execution (Metasploit)
by James Fitts
Enterprise Edition Payment Processor Script 3.7 - SQL Injection
by Ihsan Sencan
Humax HG100R-* 2.0.6 - Unauthenticated Exposure of Sensitive Information via API Session Token Bypass
The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords.
by Kivson
CVSS 9.8
Carlo Gavazzi Powersoft <2.1.1.1 - Path Traversal
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.
by James Fitts
CVSS 7.5
InduSoft Web Studio 7.1 - Path Traversal and Arbitrary Code Execution via NTWebServer
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
by James Fitts
CVSS 9.8
Carel PlantVisor <2.4.4 - Path Traversal
Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
by James Fitts
ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)
by James Fitts
VIPA Controls WinPLC7 <5.0.45.5921 - Buffer Overflow
A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution.
by James Fitts
CVSS 7.5
Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow (Metasploit)
by James Fitts
Motorola Netopia Netoctopus SDCS - Remote Stack Buffer Overflow (Metasploit)
by James Fitts
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 - Remote Code Execution
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
by Voulnet
CVSS 7.8
Fatek Automation PLC WinProladder <3.11 Build 14701 - Buffer Overflow
An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.
by James Fitts
CVSS 8.0
DameWare Mini Remote Control <4.9.0 - RCE
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username.
by James Fitts
Cloudview NMS < 2.00b - Arbitrary File Upload (Metasploit)
by James Fitts
By Source