Exploitdb Exploits
50,095 exploits tracked across all sources.
vsftpd < 2.3.3 - Authenticated Denial of Service via Glob Expression in STAT Command
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
by Maksymilian Arciemowicz
Linux Kernel < 2.6.38 - Denial of Service via epoll File Descriptor Chaining
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
by Nelson Elhage
Linux Kernel < 2.6.37.2 - Denial of Service via epoll File Descriptor Tree Traversal
The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
by Nelson Elhage
Linux Kernel < 2.6.37 - Denial of Service via TCP_MAXSEG Setsockopt
The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.
by prdelka
Microsoft Windows XP SP3 - Buffer Overflow
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
by Nikita Tarakanov
Wireshark < 1.4.4 - Denial of Service via NTLMSSP Dissector NULL Pointer Dereference
epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.
by Buildbot Builder
DivX Player 6.x - '.dps' Remote Buffer Overflow
by KedAns-Dz
Quick 'n Easy FTP Server 3.2 - Denial of Service
by clshack
Magic Music Editor - '.cda' Denial of Service
by AtT4CKxT3rR0r1ST
WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities
by Danilo Massa
SnapProof - 'retPageID' Cross-Site Scripting
by difficult 511
KMPlayer 2.9.3.1214 - '.ksf' Remote Buffer Overflow
by KedAns-Dz
PHP < 5.3.6 - Denial of Service via Exif Image File Directory Buffer Over-read
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
by _ikki & paradoxengine
EMC Replication Manager < 5.3 - Remote Code Execution via irccd.exe RunProgram Function
The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
by Metasploit
Elecard AVC_HD/MPEG Player 5.7 - Local Buffer Overflow
by sickness
eXPert PDF Reader 4.0 - Null Pointer Dereference and Heap Corruption
by LiquidWorm
WordPress Plugin OPS Old Post Spinner 2.2.1 - Local File Inclusion
by AutoSec Tools
WordPress Plugin jQuery Mega Menu 1.0 - Local File Inclusion
by AutoSec Tools
phreebooks r30rc4 - Multiple Vulnerabilities
by AutoSec Tools
By Source