Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wp-pagenavi domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/u918112125/domains/exploit.company/public_html/wp-includes/functions.php on line 6114
Exploits 63 - exploit.company
header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit

This exploit targets the Sun Solaris 10 RPC dmispd service, causing it to consume excessive resources. The exploit is executed by restarting the dmi service, which triggers the resource consumption. The exploit is demonstrated with a command sequence and the resulting resource usage is shown. The exploit was developed by Jeremy Brown and was published in September 2009.

VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC

This is a proof-of-concept exploit for a remote stack overflow vulnerability in VLC Media Player version 1.0.2. The vulnerability occurs when handling smb:// URIs. By sending a specially crafted URI, an attacker can trigger a stack overflow and potentially execute arbitrary code on the target system.

JiRo? FAQ Manager v1.0 (index.asp) Remote SQL Injection Vulnerability

The vulnerability exists due to insufficient sanitization of user-supplied input passed via the 'tID' parameter to '/index.asp' script. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in application's database, cause denial of service, access or modify sensitive data, exploit latent vulnerabilities in the underlying database and compromise the system.

?IXForum 1.12 <= "RepId" Remote SQL Injection

A remote SQL injection vulnerability exists in ?IXForum 1.12. An attacker can exploit this vulnerability to gain access to the admin panel of the application. The attacker can use the ?epId?parameter in the ?eplyNew.asp?page to inject malicious SQL code and gain access to the admin panel.

Mini-stream RM-MP3 Converter? V 3.1.2.2 Local Buffer OverFlow

Mini-stream RM-MP3 Converter? V 3.1.2.2 is vulnerable to a local buffer overflow vulnerability. An attacker can exploit this vulnerability by crafting a malicious .m3u file with a specially crafted header and a payload of 17416 bytes of A characters followed by a return address of 7C874413. This will cause the program to execute the payload, which is a shellcode that will open a command prompt.

CSRF Plugin Booking Calendar 4.1.4 ? WordPress

A vulnerability exists in the WordPress Booking Calendar plugin version 4.1.4, which allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks. An attacker can add or delete bookings by sending a malicious POST request to the vulnerable application. The POST request contains the action to be performed, such as 'INSERT_INTO_TABLE' or 'DELETE_BY_ID', and the parameters required for the action.

Recent Exploits: