Exploitdb Exploits
50,076 exploits tracked across all sources.
PHP Classifieds Rental Script 3.6.0 - 'scatid' SQL Injection
by Ihsan Sencan
Online Cinema and Event Booking Script 2.01 - 'newsid' SQL Injection
by Ihsan Sencan
Multireligion Responsive Matrimonial Script 4.7.1 - SQL Injection
by Ihsan Sencan
Entrepreneur Bus Booking Script 3.03 - 'hid_Busid' SQL Injection
by Ihsan Sencan
Deluge < 1.3.14 - Cross-Site Request Forgery via Crafted Plugin Installation
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.
by Kyle Neideck
CVSS 8.8
MikroTik RouterOS 6.25 - Denial of Service via Unsolicited TCP ACK Packets
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation.
by FarazPajohan
CVSS 7.5
FTPShell Client 6.53 - Remote Code Execution via PWD Response Buffer Overflow
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation.
by Peter Baris
CVSS 9.8
Joomla! Component Monthly Archive 3.6.4 - 'author_form' SQL Injection
by Ihsan Sencan
Joomla! Component JUX EventOn 1.0.1 - 'id' SQL Injection
by Ihsan Sencan
Joomla! Component Content ConstructionKit 1.1 - SQL Injection
by Ihsan Sencan
Joomla! Component AltaUserPoints 1.1 - 'userid' SQL Injection
by Ihsan Sencan
Wordpress Plugin Mobile App Native 3.0 - Remote File Upload
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.
by The Martian
CVSS 7.5
By Source