Exploitdb Exploits
50,076 exploits tracked across all sources.
ntopng < 2.4 - Cross-Site Request Forgery via User Management Endpoints
Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua, and admin/password_reset.lua.
by hyp3rlinx
CVSS 8.8
Microsoft Power Point 2016 - Java Code Execution
by Fady Mohammed Osman
Pagekit < 1.0.11 - Unauthenticated Password Reset via Debug Toolbar
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.
by Saurabh Banawar
CVSS 7.5
EIP-2026-109704
EXPLOITDB
MyBB < 1.8.3 (with PHP 5.6 < 5.6.11) - Remote Code Execution
by Taoguang Chen
Joomla! < 3.6.4 - Improper Access Control via Registration Form Session Data
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task.
by Charles Fol
CVSS 7.5
Joomla! < 2.5.3 - Unauthenticated Admin Account Creation
Joomla! before 2.5.3 allows Admin Account Creation.
by Charles Fol
CVSS 7.5
ICTutors Tutoring Site Script 1.1 - Authentication Bypass
by Ihsan Sencan
ICGames-Games Site Script 1.2 - Authentication Bypass
by Ihsan Sencan
Domains Marketplace Script 1.1 - Authentication Bypass
by Ihsan Sencan
Complain Management System - SQL injection
by Sibusiso Sishi
B2B Alibaba Clone Script - 'IndustryID' SQL Injection
by Ihsan Sencan
Affiliate Tracking Script 1.1 - Authentication Bypass
by Ihsan Sencan
Viral Image & Video Sharing GagZone Script - SQL Injection
by Ihsan Sencan
Home of Viral Images_ Videos and Articles Script - SQL Injection
by Ihsan Sencan
By Source