Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wp-pagenavi domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/u918112125/domains/exploit.company/public_html/wp-includes/functions.php on line 6114
Exploits 457 - exploit.company
header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

Cross-Site Scripting Vulnerabilities in Beehive Forum

The Beehive Forum application fails to properly sanitize user-supplied input, leading to multiple cross-site scripting vulnerabilities. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user, potentially stealing authentication credentials and launching further attacks.

PHP-Update <= 2.7 str_replace() sql injection / privilege escalation / cmd exec ii

This exploit allows for SQL injection, privilege escalation, and command execution on PHP-Update version 2.7 and below. It works regardless of php.ini settings and against the Php-Update MySQL version with MySQL >= 4.1. The exploit takes advantage of the str_replace() function in PHP to execute arbitrary commands on the target server.

Remote Denial-of-Service Vulnerability in Packeteer PacketShaper

The web interface of Packeteer PacketShaper fails to handle unexpected requests properly, leading to a remote denial-of-service vulnerability. An attacker with remote authentication can exploit this vulnerability to reboot the affected devices and deny service to legitimate users.

Ibrahim Ã?AKICI Okul Portal SQL Injection Vulnerability

The Ibrahim Ã?AKICI Okul Portal is vulnerable to an SQL injection vulnerability due to insufficient sanitization of user-supplied data before using it in an SQL query. An attacker can exploit this vulnerability by manipulating the SQL query logic to perform unauthorized actions on the underlying database.

Cross-Site Scripting Vulnerability in OfficeConnect Secure Router

The OfficeConnect Secure Router is vulnerable to cross-site scripting attacks. An attacker can exploit this vulnerability to launch attacks on unsuspecting users by injecting malicious code into the affected website. This can lead to the theft of cookie-based authentication credentials and other attacks.

Cross-Site Scripting Vulnerabilities in WmsCMS

WmsCMS is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. Attackers could exploit these issues to steal cookie-based authentication credentials from legitimate users of the site; other attacks are also possible.

Atom PhotoBlog Multiple Input-Validation Vulnerabilities

Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. These issues include multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability. Attackers could exploit these issues to steal cookie-based authentication credentials from legitimate users of the site; other attacks are also possible.

Remote Denial-of-Service Vulnerability in Microsoft Windows

The vulnerability exists in Microsoft Windows due to its failure to handle maliciously crafted ICO files. An attacker can exploit this vulnerability by tricking users into opening a malicious file. Successful exploitation of this vulnerability will lead to denial-of-service conditions on applications that use the affected library. Vulnerable applications include Windows Explorer and Picture and Fax viewer.

Recent Exploits: