Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wp-pagenavi domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/u918112125/domains/exploit.company/public_html/wp-includes/functions.php on line 6114
Exploits 461 - exploit.company
header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

F-Secure Policy Manager Server fsmsh.dll module DoS

The F-Secure Policy Manager Server is vulnerable to a denial-of-service attack. A malicious user can send a forged request to query a MS-DOS device name through the fsmsh.dll CGI module, causing the service to stop responding to legitimate users.

Particle Blogger SQL Injection Vulnerability

The Particle Blogger application is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CVE-2002-1234

This code snippet demonstrates a buffer overflow vulnerability in the CVS server. The vulnerability allows an attacker to execute arbitrary code on the server with elevated privileges. The vulnerability exists in the serve[] array, where the retadd field is not properly validated before being used as a return address. By manipulating the retadd field, an attacker can control the execution flow and execute their own shellcode.

Format String Vulnerability in Apple Mac OS X VPN Service Daemon

The VPN service daemon in Apple Mac OS X is prone to a format-string vulnerability. It fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers can exploit this vulnerability to crash the application or execute arbitrary code with superuser privileges, potentially leading to a complete compromise of vulnerable computers.

DGNews SQL Injection Vulnerability

The DGNews application is vulnerable to SQL injection due to inadequate sanitization of user-supplied input before using it in an SQL query. An attacker can exploit this vulnerability to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Cross-Site Scripting Vulnerability in DGNews

The DGNews application is prone to a cross-site scripting vulnerability. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. This can lead to the theft of cookie-based authentication credentials and enable the attacker to launch further attacks.

Local Buffer Overflow Vulnerability in Mutt

Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation.An attacker can exploit this issue to execute arbitrary code with the with the privileges of the victim. Failed exploit attempts will result in a denial of service.# USERNAME=$(perl -e 'print "a" x 31')# useradd -c '&&&&&&&&& your-favourite-ascii-shellcode-here' $USERNAME# echo alias billg $USERNAME >~/.muttrc# mutt billg# Segmentation fault (core dumped)

FlashChat Multiple Remote File-Include Vulnerabilities

FlashChat is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.

Recent Exploits: