Exploitdb Exploits

50,095 exploits tracked across all sources.

Sort: Activity Stars
CVE-2010-3653 EXPLOITDB ruby VERIFIED
Adobe Shockwave Player < 11.5.9.615 - Remote Code Execution via Crafted rcsL Chunk
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
by Metasploit
EIP-2026-116286 EXPLOITDB python VERIFIED
Spider Player 2.4.5 - Denial of Service
by MOHAMED ABDI
CVE-2010-4868 EXPLOITDB text VERIFIED
W-Agora < 4.2.1 - Cross-Site Scripting via search.php3 bn Parameter
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter.
by MustLive
CVE-2010-4867 EXPLOITDB text VERIFIED
W-Agora < 4.2.1 - Path Traversal via Search Parameter
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.
by MustLive
EIP-2026-112086 EXPLOITDB text VERIFIED
Simple Directory Listing 2.1 - 'SDL2.php' Cross-Site Scripting
by Amol Naik
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-4120 EXPLOITDB text VERIFIED
IBM Tivoli Access Manager for e-business 6.1.0 - Cross-Site Scripting via TAM Console Parameters
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
by IBM
CVE-2010-3856 EXPLOITDB text VERIFIED
glibc < 2.11.3 and 2.12.x < 2.12.2 - Privilege Escalation via LD_AUDIT Environment Variable
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
by Tavis Ormandy
CVE-2010-3653 EXPLOITDB text VERIFIED
Adobe Shockwave Player < 11.5.9.615 - Remote Code Execution via Crafted rcsL Chunk
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
by Abysssec
EIP-2026-115810 EXPLOITDB text VERIFIED
Microsoft Windows Mobile 6.1/6.5 - Double-Free Denial of Service
by musashi karak0rsan
EIP-2026-115809 EXPLOITDB VERIFIED
Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service
by SecurityArchitect.Org
EIP-2026-114894 EXPLOITDB perl VERIFIED
Altova DatabaseSpy 2011 - Project File Handling Buffer Overflow (PoC)
by LiquidWorm
EIP-2026-113423 EXPLOITDB text VERIFIED
Wiccle Web Builder 2.0 - Multiple Cross-Site Scripting Vulnerabilities
by Veerendra G.G
EIP-2026-112408 EXPLOITDB text VERIFIED
Squirrelcart PRO 3.0.0 - Blind SQL Injection
by Salvatore Fresta
EIP-2026-112266 EXPLOITDB html VERIFIED
sNews CMS - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
EIP-2026-110535 EXPLOITDB text VERIFIED
pecio CMS 2.0.5 - 'target' Cross-Site Scripting
by Antu Sanadi
By Source
All 50,095 Writeup 64,140 Exploitdb 50,095 Nomisec 22,791 Github 4,508 Metasploit 3,317 Vulncheck_xdb 935 Inthewild 514 Gitlab 489 Gitee 415 Patchapalooza 312
By Language
text 31,394 python 7,015 ruby 6,010 c 3,657 perl 2,849 html 2,080 php 1,335 bash 462 java 395 c++ 336 shell 271 javascript 236 go 80 typescript 26 postscript 25