- Foxit Reader 3.0 ( Build 1301) PDF Buffer Overflow Exploit
- GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit
- RoomPHPlanning 1.6 (userform.php) Create Admin User Exploit
- Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability
- Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability
- WeBid 0.7.3 RC9 Multiple Remote File Inclusion Vulnerabilities
- RainbowPlayer 0.91 (playlist) Universal SEH Overwrite Exploit
- PHP-Fusion Mod Book Panel (course_id) SQL Injection Vulnerability
- Nenriki Cms 0.5 (COOKIE) Remote SQL Injection Vulnerability
- IBM Director 5.20.3su2 CIM Server Remote DoS Vulnerability
- NextApp Echo < 2.1.1 XML Injection Vulnerability
- CMS WEBjump! Multiple SQL Injection Vulnerabilities
- VUPlayer 2.49 .cue File Universal Buffer Overflow Exploit
- phpCommunity 2.1.8 (SQL/DT/XSS) Multiple Vulnerabilities
- Addonics NAS Adapter Post-Auth Denial of Service Exploit
- PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability
- CS-Cart 2.0.0 Beta 3 (product_id) SQL Injection Vulnerability
- Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities
- PHP Director 0.21 (sql into outfile) eval() Injection Exploit
- PHPRecipeBook 2.24 (base_id) Remote SQL Injection Vulnerability
- eZip Wizard 3.0 Local Stack Buffer Overflow PoC (SEH)
- MediaCoder 0.6.2.4275 Universal Buffer Overflow Exploit (SEH)
- MediaCoder 0.6.2.4275 (m3u File) Universal Stack Overflow Exploit
- RadASM 2.2.1.5 (.RAP File) Local Stack Overflow Exploit
- Realtek Sound Manager 1.15.0.0 PlayList SEH Overwrite Exploit
- EO Video v1.36 PlayList SEH Overwrite Exploit
- mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit
- Belkin BullDog Plus UPS-Service Buffer Overflow Exploit
- OneOrZero Helpdesk 1.6.5.7 Local File Inclusion Vulnerability
- nForum 1.5 Multiple Remote SQL Injection Vulnerabilities
- Nokia Multimedia Player 1.0 (playlist) Universal SEH Overwrite Exploit
- CMS S.Builder 3.7 Remote File Inclusion Vulnerability
- isiAJAX v1 (praises.php id) Remote SQL Injection Vulnerability
- OneOrZero Helpdesk 1.6.5.7 Local File Inclusion Vulnerability
- Wili-CMS 0.4.0 (RFI/LFI/AB) Multiple Remote Vulnerabilities
- Blue Eye CMS 1.0.0 Remote Cookie SQL Injection Vulnerability
- Joomla com_ijoomla_archive Blind SQL Injection Exploit
- Multiple Vendors libc:fts_*() Local Denial of Service Exploit
- Media Commands (m3u File) Universal SEH Overwrite Exploit
- CelerBB 0.0.2 Multiple Remote Vulnerabilities
- SupportSoft DNA Editor Module (dnaedit.dll) Remote Code Execution Exploit
- Media Commands .m3l File Local Buffer Overflow Exploit
- Winamp 5.41 Skin Universal Buffer Overflow Exploit
- Joomla com_reservation (Itemid) Remote SQL Injection Exploit
- Easy File Sharing Web Server 4.8 File Disclosure Vulnerability
- Easy Web Password 1.2 Local Heap Memory Consumption PoC
- Joomla com_carman 2.x (Itemid) Remote SQL Injection Exploit
- EFS Easy Chat Server Authentication Request Buffer Overflow Exploit (pl)
- MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (fast)
- Jogjacamp JProfile Gold (id_news) Remote SQL Injection Vulnerability
- NovaBoard 1.0.1 (message) Persistent XSS Vulnerability
- EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability
- Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit
- ghostscripter Amazon Shop (XSS/DT/RFI) Multiple Vulnerabilities
- Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit
- Sopcast SopCore Control (sopocx.ocx) Command Execution Exploit
- Zabbix 1.6.2 Frontend Multiple Vulnerabilities
- BlindBlog 1.3.1 (SQL/AB/LFI) Multiple Remote Vulnerabilities
- EFS Easy Chat Server Authentication Request BOF Exploit (SEH)
- RitsBlog 0.4.2 (AB/XSS) Multiple Remote Vulnerabilities
- VUplayer 2.49 .CUE File Local Buffer Overflow Exploit
- Joomla/Mambo Component eXtplorer Code Execution Vulnerability
- Media Commands (m3u File) Local SEH Overwrite Exploit
- Media Commands (M3U,M3l,TXT,LRC Files) Local Heap Overflow PoC
- Graugon PHP Article Publisher 1.0 (SQL/CH) Multiple Remote Vulns
- Joomla com_digistore (pid) Blind SQL Injection Exploit
- Access2asp imageLibrary Arbitrary ASP Shell Upload Vulnerability
- Digital Interchange Calendar 5.7.13 Contents Change Vulnerability
- Document Library 1.0.1 Arbitrary Change Admin Vulnerability
- Novell eDirectory iMonitor (Accept-Language) Request BOF PoC
- EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities
- BlogMan 0.45 Multiple Remote Vulnerabilities
- Merak Media PLayer 3.2 m3u File Local Buffer Overflow Exploit (SEH)
- HTC Touch vCard over IP Denial of Service Exploit
- Demium CMS 0.2.1B Multiple Vulnerabilities and Exploit
- Irokez BLog 0.7.3.2 (XSS/RFI/BSQL) Multiple Remote Vulnerabilities
- Hex Workshop v6 (.HEX File) Local Code Execution Exploit
- SkyPortal Downloads Manager v1.1 Remote Contents Change Vuln
- Orbit 2.4 Long Hostname Remote Buffer Overflow Exploit
- POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Exploit (SEH)
- BannerManager 0.81 (Auth Bypass) SQL Injection Vulnerability
- Coppermine Photo Gallery 1.4.20 (IMG) Privilege Escalation Exploit
- Coppermine Photo Gallery 1.4.20 (BBCode IMG) Privilege Escalation
- DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln
- Golabi CMS Remote File Inclusion Vulnerability
- SkyPortal WebLinks 0.12 Contents Change Vulnerability
- SkyPortal Classifieds System 0.12 Admin Bypass Vulnerabilities
- SkyPortal Picture Manager 0.11 Admin Bypass Vulnerabilities
- Apple MACOS X xnu 1228.x Local Kernel Memory Disclosure Exploit
- PenPal 2.0 (Auth Bypass) Remote SQL Injection Vulnerability
- Netgear WGR614v9 Wireless Router Get Request Denial of Service Vuln
- pPIM 1.0 Multiple Remote Vulnerabilities
- Qwerty CMS (id) Remote SQL Injection Vulnerability
- Counter Strike Source ManiAdminPlugin 1.x Remote Buffer Overflow PoC
- XGuestBook 2.0 (Auth Bypass) SQL Injection Vulnerability
- MDPro Module My_eGallery (pid) Remote SQL Injection Exploit
- Adobe Acrobat Reader JBIG2 Local Buffer Overflow PoC #2 0day
- taifajobs 1.0 (jobid) Remote SQL Injection Vulnerability
- Optus/Huawei E960 HSDPA Router SMS XSS Attack
- MLdonkey 2.9.7 HTTP DOUBLE SLASH Arbitrary File Disclosure Vuln
- Pyrophobia 2.1.3.1 LFI Command Execution Exploit
- Free Arcade Script 1.0 LFI Command Execution Exploit
- pPIM 1.01 (notes.php id) Remote Command Execution Exploit
- zFeeder 1.6 (admin.php) No Authentication Vulnerability
- Mozilla Firefox 3.0.6 (BODY onload) Denial of Service Exploit
- Multiple PDF Readers JBIG2 Local Buffer Overflow PoC
- Graugon Forum v1 (id) SQL Command Injection Exploit
- Osmodia Bulletin Board 1.x (admin.txt) File Disclosure Vulnerability
- i-dreams GB Server (admin.dat) File Disclosure Vulnerability
- MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (py)
- MS Internet Explorer 7 Memory Corruption PoC (MS09-002) (win2k3sp2)
- phpBB 3 (autopost bot mod 0.1.3) Remote File Include Vulnerability
- Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit
- i-dreams Mailer 1.2 Final (admin.dat) File Disclosure Vulnerability
- i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability
- MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (xp sp2)
- MS Internet Explorer 7 Memory Corruption PoC (MS09-002)
- smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities
- Firepack (admin/ref.php) Remote Code Execution Exploit
- Oracle 10g MDSYS.SDO_TOPO_DROP_FTBL SQL Injection Exploit (meta)
- pHNews Alpha 1 (genbackup.php) Database Disclosure Vulnerability
- pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability
- S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns
- SAS Hotel Management System Remote Shell Upload Vulnerability
- Grestul 1.x Auth Bypass by Cookie SQL Injection Vulnerability
- RavenNuke 2.3.0 Multiple Remote Vulnerabilities
- Enomaly ECP / Enomalism < 2.2.1 Multiple Local Vulnerabilities
- YACS CMS 8.11 update_trailer.php Remote File Inclusion Vulnerability
- SAS Hotel Management System (myhotel_info.asp) SQL Injection Vulnerability
- MemHT Portal 4.0.1 (pvtmsg) Delete All Private Messages Exploit
- PowerMovieList 0.14b (SQL/XSS) Multiple Remote Vulnerabilities
- NovaBoard 1.0.0 Multiple Remote Vulnerabilities
- simplePMS CMS 0.1.3a LFI / Remote Command Execution Exploit
- GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC
- Falt4 CMS RC4 (fckeditor) Arbitrary File Upload Exploit
- TPTEST 3.1.7 Stack Buffer Overflow PoC
- InselPhoto 1.1 Persistent XSS Vulnerability
- ClipBucket 1.7 (dwnld.php file) Remote File Disclosure Vulnerability
- FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit
- BlogWrite 0.91 Remote FD / SQL Injection Exploit
- CmsFaethon 2.2.0 (info.php item) SQL Command Injection Exploit
- ea-gBook 0.1 Remote Command Execution with RFI (c99) Exploit
- Nokia N95-8 browser (setAttributeNode) Method Crash Exploit
- Vlinks 1.1.6 (id) Remote SQL Injection Vulnerability
- IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities
- Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns
- Free Joke Script 1.0 Auth Bypass / SQL Injection Vulnerability
- PHP Krazy Image Host Script 1.01 (viewer.php id) SQL Injection Vuln
- InselPhoto 1.1 (query) Remote SQL Injection Exploit
- Den Dating 9.01(searchmatch.php) SQL Injection Vulnerability
- Dacio's CMS 1.08 (XSS/SQL/DD) Multiple Remote Vulnerabilities
- GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln
- Graugon Gallery 1.0 (XSS/SQL/Cookie Bypass) Remote Vulnerabilities
- SkaDate Online 7 Remote Shell Upload Vulnerability
- TYPO3 < 4.0.12/4.1.10/4.2.6 (jumpUrl) Remote File Disclosure Exploit
- ProFTPd with mod_mysql Authentication Bypass Vulnerability
- Fluorine CMS 0.1 rc 1 FD / SQL Injection Command Execution Exploit
- Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit
- BlueBird Pre-Release (Auth Bypass) SQL Injection Vulnerability
- Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit
- Thyme 1.3 (export_to) Local File Inclusion Vulnerability
- Papoo CMS 3.x (pfadhier) Local File Inclusion Vulnerability
- q-news 2.0 Remote Command Execution Exploit
- Gaeste 1.6 (gastbuch.php) Remote File Disclosure Vulnerability
- WB News 2.1.1 config[installdir] Remote File Inclusion Vulnerability
- webframe 0.76 Multiple File Inclusion Vulnerabilities
- TightVNC Authentication Failure Integer Overflow PoC
- ZeroShell 1.0beta11 Remote Code Execution Vulnerability
- 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
- IF-CMS 2.0 (frame.php id) Blind SQL Injection Exploit
- Traidnt UP Version 1.0 Remote File Upload Vulnerability
- phpYabs 0.1.2 (Azione) Remote File Inclusion Vulnerability
- SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
- 1024 CMS 1.4.4 Remote Command Execution with RFI (c99) Exploit
- CafeEngine (index.php catid) Remote SQL Injection Vulnerability
- Mailist 3.0 Insecure Backup/Local File Inclusion Vulnerabilities
- ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities
- Simple PHP News 1.0 Remote Command Execution Exploit
- WikkiTikkiTavi 1.11 Remote PHP File Upload Vulnerability
- txtBB 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit
- ClearBudget 0.6.1 (Misspelled htaccess) Insecure DD Vulnerability
- FeedMon 2.7.0.0 outline Tag Buffer Overflow Exploit PoC
- dBpowerAMP Audio Player 2 .PLS File Local Buffer Overflow Exploit
- Kipper 2.01 (XSS/LFI/DD) Multiple Vulnerabilities
- ClearBudget 0.6.1 Insecure Cookie Handling / LFI Vulnerabilities
- GR Note 0.94 beta (Auth Bypass) Remote Database Backup Vulnerability
- UltraVNC/TightVNC Multiple VNC Clients Multiple Integer Overflow PoC
- Amaya Web Browser 11 (bdo tag) Remote Stack Overflow Exploit (vista)
- Amaya Web Browser 11 (bdo tag) Remote Stack Overflow Exploit (winxp)
- GR Blog 1.1.4 (Upload/Bypass) Multiple Remote Vulnerabilities
- Novell GroupWise 8.0 Malformed RCPT command Off-by-one Exploit
- Free Download Manager 2.5/3.0 (Authorization) Stack Buffer Overflow PoC
- YapBB 1.2 (forumID) Blind SQL Injection Exploit
- Power System Of Article Management (DD/XSS) Vulnerabilities
- Team 1.x (DD/XSS) Multiple Remote Vulnerabilities
- Euphonics Audio Player 1.0 (.pls) Local Buffer Overflow Exploit (xp/sp3)
- Euphonics Audio Player 1.0 (.pls) Universal Local Buffer Overflow Exploit
- BlazeVideo HDTV Player 3.5 PLF Playlist File Remote Overflow Exploit
- Jaws 0.8.8 Multiple Local File Inclusion Vulnerabilities
- Syntax Desktop 2.7 (synTarget) Local File Inclusion Vulnerability
- rgboard v4 5p1 (07.07.27) Multiple Remote Vulnerabilities
- GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities
- PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit
- Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit
- DMXReady online notebookmanager 1.1 Auth Bypass Vulnerability
- Flatnux 2009-01-27 Remote File Inclusion Vulnerability
- NaviCopa webserver 3.0.1 (BOF/SD) Multiple Remote Vulnerabilities
- TxtBlog 1.0 Alpha Remote Command Execution Exploit
- DreamPics Photo/Video Gallery Blind SQL Injection Exploit
- Technote 7.2 Remote File Inclusion Vulnerability
- Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference PoC
- 4Site CMS 2.6 Multiple Remote SQL Injection Vulnerabilities
- MyDesing Sayac 2.0 (Auth Bypass) SQL Injection Vulnerability
- Euphonics Audio Player v1.0 (.pls) Local Buffer Overflow Exploit
- Simple Machines Forums (BBCode) Cookie Stealing Vulnerability
- AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability
- WEBalbum 2.4b (photo.php id) Blind SQL Injection Exploit
- Free Download Manager 3.0 Build 844 .torrent BOF Exploit
- WholeHogSoftware Ware Support Insecure Cookie Handling Vulnerability
- WholeHogSoftware Password Protect Insecure Cookie Handling Vuln
- ClickCart 6.0 (Auth Bypass) Remote SQL Injection Vulnerability
- Groone GLinks 2.1 Remote File Inclusion Vulnerability
- Groone's Guestbook 2.0 Remote File Inclusion Vulnerability
- Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability
- CMS from Scratch 1.9.1 (fckeditor) Remote File Upload Exploit
- OpenHelpDesk 1.0.100 eval() Code Execution Exploit (meta)
- phpslash 0.8.1.1 Remote Code Execution Exploit
- CMS Mini 0.2.2 Remote Command Execution Exploit
- eVision CMS 2.0 Remote Code Execution Exploit
- sourdough 0.3.5 Remote File Inclusion Vulnerability
- phpBLASTER 1.0 RC1 (blaster_user) Blind SQL Injection Exploit
- RealVNC 4.1.2 (vncviewer.exe) RFB Protocol Remote Code Execution PoC
- WholeHogSoftware Password Protect (Auth Bypass) SQL Injection Vuln
- Elecard AVC HD PLAYER (m3u/xpl file) Local Stack Overflow PoC
- AJA Portal 1.2 Local File Inclusion Vulnerabilities (win)
- WholeHogSoftware Ware Support (Auth Bypass) SQL Injection Vuln
- Small HTTP Server 3.05.85 Directory Traversal Exploit
- Flatnux 2009-01-27 (Job fields) XSS/Iframe Injection PoC
- SMA-DB 0.3.12 (RFI/XSS) Multiple Remote Vulnerabilities
- Google Chrome 1.0.154.46 (ChromeHTML://) Parameter Injection PoC
- eVision CMS 2.0 (field) SQL Injection Vulnerability
- Spider Player 2.3.9.5 (asx File) off by one Crash Exploit
- SkaLinks 1.5 (Auth Bypass) SQL Injection Vulnerability
- Orca 2.0.2 (Topic) Remote XSS Vulnerability
- BPAutoSales 1.0.1 (XSS/SQL) Multiple Remote Vulnerabilities
- GOM Player 2.0.12 (.PLS) Universal Buffer Overflow Exploit
- Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln
- ReVou Twitter Clone (XSS/SQL) Multiple Remote Vulnerabilities
- Amaya Web Editor 11 Remote SEH Overwrite Exploit
- GNUBoard 4.31.04 (09.01.30) Multiple Local/Remote Vulnerabilities