Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wp-pagenavi domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/u918112125/domains/exploit.company/public_html/wp-includes/functions.php on line 6114
Exploits 495 - exploit.company
header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

log1 CMS Security Bypass and Remote File Include Vulnerabilities

log1 CMS is prone to a security-bypass vulnerability because of a design flaw and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Cross-Site Scripting Vulnerability in boastMachine

The boastMachine application fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker can exploit this vulnerability by injecting arbitrary script code in the affected site, potentially allowing them to steal authentication credentials and launch further attacks.

cPanel Image Manager local file-include vulnerability

The cPanel Image Manager is vulnerable to a local file-include vulnerability due to improper sanitization of user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts within the context of the webserver process, potentially leading to further attacks.

Barracuda Networks Message Archiver 650 – Persistent Input Validation Vulnerability

The Barracuda Message Archiver is vulnerable to a persistent input validation vulnerability. This allows remote authenticated attackers to inject malicious scripts into the application, potentially leading to cross-site scripting (XSS) attacks. This vulnerability can be exploited by sending specially crafted input to the affected application. Successful exploitation can result in the execution of arbitrary HTML or JavaScript code in the context of the user's browser.

CuteSITE CMS SQL Injection and Cross-Site Scripting Vulnerabilities

CuteSITE CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

SQL Injection vulnerability in PonVFTP

PonVFTP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. The following example data is available: password: 'or' 1=1

Aqua Real Screensaver Buffer Overflow Vulnerability

Aqua Real Screensaver is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed attacks will cause denial-of-service conditions.

Recent Exploits: