Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wp-pagenavi domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/u918112125/domains/exploit.company/public_html/wp-includes/functions.php on line 6114
Exploits 470 - exploit.company
header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

Cross-Site Scripting Vulnerability in D-Link DSL-G624T

The D-Link DSL-G624T router is prone to a cross-site scripting vulnerability. The issue occurs due to a failure to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary script code in the browser of a victim user, within the context of the affected site. This can potentially lead to the theft of cookie-based authentication credentials and facilitate other malicious activities.

Buffer Overflow Vulnerability in Atomix MP3

Atomix MP3 is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit this issue by enticing a victim to load a malicious MP3 file. If successful, the attacker can execute arbitrary code in the context of the affected application.

SQL Injection vulnerability in CMS Made Simple

CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

X.Org X Window System Xserver Denial-of-Service Vulnerability

X.Org X Window System Xserver is prone to a denial-of-service vulnerabilty because the software fails to properly handle exceptional conditions. Attackers who can connect to a vulnerable X server may exploit this issue to crash the targeted server, denying further service to legitimate users.

E-Annu SQL Injection Vulnerability

E-Annu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

MyBB <= 1.6.11 Remote Code Execution Using Admin Privileges

In older versions of MyBB, it was possible to execute PHP code by injecting the code into a template file. This bug has been fixed in the latest version, but there is a little bug in the language editor section. By exploiting this bug, an attacker with admin privileges can write PHP code in the language file and execute it. The exploit takes advantage of the fact that MyBB treats the language variable as an integer, allowing the execution of PHP functions.

SQL Injection in Gazi Download Portal

The Gazi Download Portal is vulnerable to SQL injection due to lack of proper input sanitization. An attacker can exploit this vulnerability by injecting malicious SQL code into user-supplied data, which can lead to unauthorized access, data manipulation, and exploitation of other vulnerabilities in the database.

Cross-Site Scripting Vulnerabilities in Red Hat Directory Server

Red Hat Directory Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

Recent Exploits: