Exploitdb Exploits
50,076 exploits tracked across all sources.
Inout Webmail Ultimate Edition 4.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout StickBoard 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout SocialTiles 2.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout SmartDeal 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout Search Engine Ultimate Edition 7.0/8.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout QuerySpace 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout Celebrities 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Inout CareerLamp 1.0 Script - Improper Access Restrictions
by Ihsan Sencan
Entrepreneur Matrimonial Script - Authentication Bypass
by Ihsan Sencan
Courier Business Website Script - Authentication Bypass
by Ihsan Sencan
Zeroshell 3.6.0/3.7.0 Net Services - Remote Code Execution
by Ozer Goker
Cisco Firepower Mgmt Cntr <6.0.1 - RCE
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.
by Metasploit
CVSS 8.8
Itech Job Portal Script 9.11 - Authentication Bypass
by Dawid Morawski
Trend Micro InterScan Web Security Virtual Appliance < 6.5 - Stored XSS via Report Template Name
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user to inject malicious JavaScript while creating a new report. Additionally, IWSVA implements incorrect access control that allows any authenticated, remote user (even with low privileges like 'Auditor') to create or modify reports, and consequently take advantage of this XSS vulnerability. The JavaScript is executed when victims visit reports or auditlog pages.
by SlidingWindow
CVSS 5.4
Huawei Flybox B660 - Cross-Site Request Forgery (2)
by Vulnerability-Lab
Itechscripts School Management Software 2.75 - SQL Injection
A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
by Ihsan Sencan
CVSS 6.3
By Source