Exploitdb Exploits
50,095 exploits tracked across all sources.
HP Data Protector - Remote Code Execution via EXEC_CMD Argument Injection
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
by SZ
Microsoft Visual Studio 2005 SP1-Report Viewer 2005 SP1 - XSS
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
by Adam Bixby
Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2 - Remote Code Execution via Crafted Spreadsheet
Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka "Excel Buffer Overrun Vulnerability."
by webDEViL
OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities
by Houssam Sahli
FCKEditor Core - 'FileManager test.html' Arbitrary File Upload (2)
by pentesters.ir
Adobe Flash Media Server - Memory Corruption
Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.
by Knud Erik Hojgaard
iphone/ipad phone drive 1.1.1 - Directory Traversal
by Khashayar Fereidani
XpressEngine 1.4.5.7 - Persistent Cross-Site Scripting
by v0nSch3lling
BlueSoft Banner Exchange - 'referer_id' SQL Injection
by darkTR
Free CD to MP3 Converter 3.1 - Universal DEP Bypass
by C4SS!0 G0M3S
HP 9000 - Path Traversal
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
by Myo Soe
HP 9000 - Path Traversal
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
by Myo Soe
WordPress Plugin UPM Polls 1.0.3 - SQL Injection
by Miroslav Stampar
WordPress Plugin Media Library Categories 1.0.6 - SQL Injection
by Miroslav Stampar
AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities
by LiquidWorm
By Source