Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR


WordPress Plugin Filterable Portfolio Gallery 1.0 - 'title' Stored Cross-Site Scripting (XSS)


WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery (CSRF)


WordPress Plugin Form Maker 5.4.1 - 's' SQL Injection (Authenticated)


WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution


WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)


Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection


WordPress Plugin Helpful 2.4.11 - SQL Injection


WordPress Plugin Hotel Listing 3 - 'Multiple' Cross-Site Scripting (XSS)


WordPress Plugin HS Brand Logo Slider 2.1 - 'logoupload' File Upload


Wordpress Plugin ImageMagick-Engine 1.7.4 - Remote Code Execution (RCE) (Authenticated)


WordPress Plugin InfiniteWP - Client Authentication Bypass (Metasploit)


WordPress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass


WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting (XSS)


WordPress Plugin IP2Location Country Blocker 2.26.7 - Stored Cross Site Scripting (XSS) (Authenticated)


Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)


WordPress Plugin Jetpack 9.1 - Cross Site Scripting (XSS)


WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)


WordPress Plugin LearnDash LMS 3.1.2 - Reflective Cross-Site Scripting


WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)


WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation


WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming


WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS)


WordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting


WordPress Plugin Mail Masta 1.0 - Local File Inclusion (2)


Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting


Wordpress Plugin Masterstudy LMS - 3.0.17 - Unauthenticated Instructor Account Creation


WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation


WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion


WordPress Plugin Media-Tags 3.2.0.2 - Stored Cross-Site Scripting (XSS)


WordPress Plugin Mimetic Books 0.2.13 - 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)


Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)


Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)


WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)


WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)


WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - SQL Injection


WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)


Wordpress Plugin MStore API 2.0.6 - Arbitrary File Upload


WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)


WordPress Plugin Netroics Blog Posts Grid 1.0 - Stored Cross-Site Scripting (XSS)


WordPress Plugin Ninja Forms 3.6.25 - Reflected XSS


WordPress Plugin Ninja Tables 4.1.7 - Stored Cross-Site Scripting (XSS)


WordPress Plugin Payments Plugin | GetPaid 2.4.6 - HTML Injection


WordPress Plugin Perfect Survey - 1.5.1 - SQLi (Unauthenticated)


WordPress Plugin Picture Gallery 1.4.2 - 'Edit Content URL' Stored Cross-Site Scripting (XSS)


Wordpress Plugin PicUploader 1.0 - Remote File Upload


WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation (Unauthenticated)


WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)


Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS)


WordPress Plugin Poll_ Survey_ Questionnaire and Voting system 1.5.2 - 'date_answers' Blind SQL Injection


WordPress Plugin Popular Posts 5.3.2 - Remote Code Execution (RCE) (Authenticated)


WordPress Plugin Popup 1.10.4 - Reflected Cross-Site Scripting (XSS)


WordPress Plugin Popup Anything 2.0.3 - 'Multiple' Stored Cross-Site Scripting (XSS)


WordPress Plugin Popup Builder 3.69.6 - Multiple Stored Cross Site Scripting


WordPress Plugin Popup Maker 1.16.5 - Stored Cross-Site Scripting (Authenticated)


WordPress Plugin Post Grid 2.1.1 - Cross Site Scripting (XSS)


WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting


Wordpress Plugin Powie's WHOIS Domain Check 0.9.31 - Persistent Cross-Site Scripting


WordPress Plugin Product Slider for WooCommerce 1.13.21 - Cross Site Scripting (XSS)


WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated)


WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)


WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting


WordPress Plugin RegistrationMagic V 5.0.1.5 - SQL Injection (Authenticated)


WordPress Plugin Rest Google Maps < 7.11.18 - SQL Injection


WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS)


WordPress Plugin Search Meter 2.13.2 - CSV injection


WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthenticated)


WordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS)


WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS)


WordPress Plugin Simple File List 4.2.2 - Arbitrary File Upload


WordPress Plugin Simple File List 4.2.2 - Remote Code Execution


Wordpress Plugin Simple Job Board 2.9.3 - Authenticated File Read (Metasploit)


Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion


WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)


WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated)


Wordpress Plugin Smart Product Review 1.0.4 - Arbitrary File Upload


WordPress Plugin Smart Slider-3 3.5.0.8 - 'name' Stored Cross-Site Scripting (XSS)


Wordpress Plugin SP Project & Document Manager 4.21 - Remote Code Execution (RCE) (Authenticated)


WordPress Plugin stafflist 3.1.2 - SQLi (Authenticated)


WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)


WordPress Plugin Stripe Payments 2.0.39 - 'AcceptStripePayments-settings[currency_code]' Stored XSS


WordPress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting


WordPress Plugin SuperForms 4.9 - Arbitrary File Upload


WordPress Plugin Supsystic Backup 2.3.9 - Local File Inclusion


WordPress Plugin Supsystic Contact Form  1.7.18 - 'label' Stored Cross-Site Scripting (XSS)


WordPress Plugin Supsystic Contact Form 1.7.5 - Multiple Vulnerabilities


WordPress Plugin Supsystic Data Tables Generator 1.9.96 - Multiple Vulnerabilities


WordPress Plugin Supsystic Digital Publications 1.6.9 - Multiple Vulnerabilities


WordPress Plugin Supsystic Membership 1.4.7 - 'sidx' SQL injection


WordPress Plugin Supsystic Newsletter 1.5.5 - 'sidx' SQL injection


WordPress Plugin Supsystic Pricing Table 1.8.7 - Multiple Vulnerabilities


WordPress Plugin Supsystic Ultimate Maps 1.1.12 - 'sidx' SQL injection


WordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2)


WordPress Plugin TablePress 1.14 - CSV Injection


WordPress Plugin TaxoPress 3.0.7.1 - Stored Cross-Site Scripting (XSS) (Authenticated)


WordPress Plugin Testimonial Slider and Showcase 2.2.6 - Stored Cross-Site Scripting (XSS)


WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated)


Wordpress Plugin TheCartPress 1.5.3.6 - Privilege Escalation (Unauthenticated)


WordPress Plugin Time Capsule 1.21.16 - Authentication Bypass


WordPress Plugin TranslatePress 2.0.8 - Stored Cross-Site Scripting (XSS) (Authenticated)


WordPress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)


WordPress Plugin Tutor.1.5.3 - Local File Inclusion


WordPress Plugin tutor.1.5.3 - Persistent Cross-Site Scripting


WordPress Plugin Typebot 1.4.3 - Stored Cross Site Scripting (XSS) (Authenticated)


WordPress Plugin Ultimate Maps 1.2.4 - Reflected Cross-Site Scripting (XSS)


WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion


WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion


WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS)


WordPress Plugin visitors-app 0.3 - 'user-agent' Stored Cross-Site Scripting (XSS)


WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi


WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)


WordPress Plugin Wappointment 2.2.4 - Stored Cross-Site Scripting (XSS)


WordPress Plugin Weblizar 8.9 - Backdoor


WordPress Plugin Welcart e-Commerce 2.0.0 - 'search[order_column][0]' SQL injection


WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass


WordPress Plugin WooCommerce CardGate Payment Gateway 3.1.15 - Payment Process Bypass


WordPress Plugin WOOF Products Filter for WooCommerce 1.2.3 - Persistent Cross-Site Scripting


WordPress Plugin Wordfence.7.4.5 - Local File Disclosure


Wordpress Plugin WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure


WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)


WordPress Plugin WP Google Maps 8.1.11 - Stored Cross-Site Scripting (XSS)


Wordpress Plugin WP Guppy 1.1 - WP-JSON API Sensitive Information Disclosure


WordPress Plugin WP Learn Manager 1.1.2 - Stored Cross-Site Scripting (XSS)


WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)


WordPress Plugin WP Sitemap Page 1.6.2 - Persistent Cross-Site Scripting


WordPress Plugin WP Sitemap Page 1.6.4 - Stored Cross-Site Scripting (XSS)


WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)


WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated)


Wordpress Plugin WP Super Edit 2.5.4 - Remote File Upload


WordPress Plugin WP Symposium Pro 2021.10 - 'wps_admin_forum_add_name' Stored Cross-Site Scripting (XSS)


WordPress Plugin WP User Frontend 3.5.25 - SQLi (Authenticated)


Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting (XSS)


WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection


WordPress Plugin Wp-FileManager 6.8 - RCE


WordPress Plugin WP-Paginate 2.1.3 - 'preset' Stored XSS


WordPress Plugin WP-PostRatings 1.86 - 'postratings_image' Cross-Site Scripting


WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)


Wordpress Plugin WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS)


WordPress Plugin WP24 Domain Check 1.6.2 - 'fieldnameDomain' Stored Cross Site Scripting


Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated)


WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated)


Wordpress Plugin wpDiscuz 7.0.4 - Unauthenticated Arbitrary File Upload (Metasploit)


WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting


Wordpress Plugin WPForms 1.6.3.1 - Persistent Cross Site Scripting (Authenticated)


WordPress Plugin WPFront Notification Bar 1.9.1.04012 - Stored Cross-Site Scripting (XSS)


WordPress Plugin WPSchoolPress 2.1.16 - 'Multiple' Cross Site Scripting (XSS)


Wordpress Plugin XCloner 4.2.12 - Remote Code Execution (Authenticated)


WordPress Plugin YOP Polls 6.2.7 - Stored Cross Site Scripting (XSS)


Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi


Wordpress Seotheme - Remote Code Execution Unauthenticated


Wordpress Sonaar Music Plugin 4.7 - Stored XSS


Wordpress Theme Accesspress Social Icons 1.7.9 - SQL injection (Authenticated)


WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)


WordPress Theme Fruitful 3.8 - Persistent Cross-Site Scripting


WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password


WordPress Theme NexosReal Estate 1.7 - 'search_order' SQL Injection


Wordpress Theme Travelscape v1.0.3 - Arbitrary File Upload


Wordpress Theme Wibar 1.1.8 - 'Brand Component' Stored Cross Site Scripting


WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution


Wordpress Theme XStore 9.3.8 - SQLi


WorkOrder CMS 0.1.0 - SQL Injection


Workout Journal App 1.0 - Stored XSS


WoWonder Social Network Platform 3.1 - 'event_id' SQL Injection


WoWonder Social Network Platform 3.1 - Authentication Bypass


WP All Import v3.6.7 - Remote Code Execution (RCE) (Authenticated)


WP AutoComplete 1.0.4 - Unauthenticated SQLi


WP Fastest Cache 1.2.2 - Unauthenticated SQL Injection


WP Rocket < 2.10.3 - Local File Inclusion (LFI)


WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)


WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)


WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE


WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS) (Authenticated)


Wp2Fac - OS Command Injection


WPForms 1.7.8 - Cross-Site Scripting (XSS)


WPN-XM Serverstack for Windows 0.8.6 - Multiple Vulnerabilities


WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)


X2CRM 8.5 - Stored Cross-Site Scripting (XSS)


X2CRM v6.6/6.9 - Reflected Cross-Site Scripting (XSS) (Authenticated)


X2CRM v6.6/6.9 - Stored Cross-Site Scripting (XSS) (Authenticated)


xbtitFM 4.1.18 - Multiple Vulnerabilities


XCMS v1.83 - Remote Command Execution (RCE)


Xenforo Version 2.2.13 - Authenticated Stored XSS


Xeroneit Library Management System 3.0 - 'category' SQL Injection


Xeroneit Library Management System 3.1 - _Add Book Category _ Stored XSS


Xerte 3.10.3 - Directory Traversal (Authenticated)


Xerte 3.9 - Remote Code Execution (RCE) (Authenticated)


Xhibiter NFT Marketplace 1.10.2 - SQL Injection


XMB 1.9.12.06 - Stored XSS


Xoops CMS 2.5.10 - Stored Cross-Site Scripting (XSS) (Authenticated)


XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)


XWiki Standard 14.10 - Remote Code Execution (RCE)


Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected Cross Site Scripting (XSS)


YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection


YetiShare File Hosting Script 5.1.0 - 'url' Server-Side Request Forgery


Yoga Class Registration System v1.0 - Multiple SQLi


Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting (XSS)


Young Entrepreneur E-Negosyo System 1.0 - SQL Injection Authentication Bypass


YouPHPTube<= 7.8 - Multiple Vulnerabilities


YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting


Zabbix 3.4.7 - Stored XSS


Zabbix 5.0.0 - Stored XSS via URL Widget Iframe


Zabbix 5.0.17 - Remote Code Execution (RCE) (Authenticated)


Zabbix 7.0.0 - SQL Injection


Zen Cart 1.5.7b - Remote Code Execution (Authenticated)


Zenario CMS 8.8.52729 - 'cID' SQL injection (Authenticated)


Zenario CMS 8.8.53370 - 'id' Blind SQL Injection


Zenario CMS 9.0.54156 - Remote Code Execution (RCE) (Authenticated)


Zenphoto 1.6 - Multiple stored XSS


ZenTao Pro 8.8.2 - Command Injection


Zentao Project Management System 17.0 - Authenticated Remote Code Execution (RCE)


Zomplog 3.9 - Cross-site scripting (XSS)


zomplog 3.9 - Remote Code Execution (RCE)


Zoneminder < v1.37.24 - Log Injection & Stored XSS & CSRF Bypass


ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE


Zoo Management System 1.0 - 'anid' SQL Injection


Zoo Management System 1.0 - 'Multiple' Persistent Cross-Site-Scripting (XSS)


Zoo Management System 1.0 - Authentication Bypass


Zoo Management System 1.0 - Unauthenticated RCE


Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)


zstore 6.6.0 - Cross-Site Scripting (XSS)


dirsearch 0.4.1 - CSV Injection


Facebook ParlAI 1.0.0 -  Deserialization of Untrusted Data in parlai


Knockpy 4.1.1 - CSV Injection


Binwalk v2.3.2 - Remote Command Execution (RCE)


Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)


Hugging Face Transformers MobileViTV2 4.41.1 - Remote Code Execution (RCE)


Keras 2.15 - Remote Code Execution (RCE)


NVFLARE < 2.1.4 - Unsafe Deserialization due to Pickle


Pymatgen 2024.1 - Remote Code Execution (RCE)


PyScript - Read Remote Python Source Code


rpc.py 0.6.0 - Remote Code Execution (RCE)


_camp_ Raspberry Pi camera server 1.0 -  Authentication Bypass


aaPanel 6.6.6 - Privilege Escalation & Remote Code Execution (Authenticated)


aiohttp 3.9.1 - directory traversal PoC


Ajenti 2.1.36 - Remote Code Execution (Authenticated)


Bitbucket v7.0.0 -  RCE


copyparty 1.8.2 - Directory Traversal


copyparty v1.8.6 - Reflected Cross Site Scripting (XSS)


CVAT 2.0 - Server Side Request Forgery


Devika v1 - Path Traversal via 'snapshot_path'


django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)


djangorestframework-simplejwt 5.3.1 - Information Disclosure


DocsGPT 0.12.0 - Remote Code Execution


ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)


Frappe Framework (ERPNext) 13.4.0 - Remote Code Execution (Authenticated)


Home Assistant Community Store (HACS) 1.10.0 - Directory Traversal


Invesalius3 - Remote Code Execution


Label Studio 1.5.0 - Authenticated Server Side Request Forgery (SSRF)


modoboa  2.0.4 - Admin TakeOver


OpenPLC 3 - Remote Code Execution (Authenticated)


Pallets Werkzeug 0.15.4 - Path Traversal


Pi-hole 4.3.2 - Remote Code Execution (Authenticated)


Products.PluggableAuthService 2.6.0 - Open Redirect


PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)


Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated)


Ray OS v2.6.3 - Command Injection RCE(Unauthorized)


Roxy WI v6.1.0.0 - Improper Authentication Control


Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE)


Roxy WI v6.1.1.0 - Unauthenticated Remote Code Execution (RCE) via ssl_cert Upload


Sentry 8.2.0 - Remote Code Execution (RCE) (Authenticated)


pdfkit v0.8.7.2 - Command Injection


Camaleon CMS v2.7.0 - Server-Side Template Injection (SSTI)


Cameleon CMS 2.7.4 - Persistent Stored XSS in Post Title


GitLab 11.4.7 - RCE (Authenticated) (2)


GitLab 11.4.7 - Remote Code Execution (Authenticated) (1)


GitLab 12.9.0 - Arbitrary File Read


Gitlab 12.9.0 - Arbitrary File Read (Authenticated)


Gitlab 13.10.2 - Remote Code Execution (Authenticated)


GitLab 13.10.2 - Remote Code Execution (RCE) (Unauthenticated)


Gitlab 13.9.3 - Remote Code Execution (Authenticated)


Gitlab 14.9 - Authentication Bypass


GitLab 14.9 - Stored Cross-Site Scripting (XSS)


GitLab Community Edition (CE) 13.10.3 - 'Sign_Up' User Enumeration


GitLab Community Edition (CE) 13.10.3 - User Enumeration


GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)


Rails 5.0.1 - Remote Code Execution


STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin)


STVS ProVision 5.9.10 - File Disclosure (Authenticated)


SCO Openserver 5.0.7 - 'outputform' Command Injection


SCO Openserver 5.0.7 - 'section' Reflected XSS


Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation


Solaris 10  (SPARC) - 'dtprintinfo' Local Privilege Escalation (3)


Solaris 10 (Intel) - 'dtprintinfo' Local Privilege Escalation (2)


Solaris 10 (Intel) - 'dtprintinfo' Local Privilege Escalation (3)


Solaris 10 (SPARC) - 'dtprintinfo' Local Privilege Escalation (1)


Solaris 10 (SPARC) - 'dtprintinfo' Local Privilege Escalation (2)


Solaris 10 libXm - Buffer overflow Local privilege escalation


SunOS 5.10 Generic_147148-26 - Local Privilege Escalation


Solaris SunSSH 11.0 x86 - libpam Remote Root


Solaris SunSSH 11.0 x86 - libpam Remote Root (2)


Solaris SunSSH 11.0 x86 - libpam Remote Root (3)


Client Management System 1.1 - 'Search' SQL Injection


ever gauzy v0.281.9 - JWT weak HMAC secret


Flowise 1.6.5 - Authentication Bypass


FUXA V.1.1.13-1186 - Unauthenticated Remote Code Execution (RCE)


Grafana <=6.2.4 - HTML Injection


Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)


vsftpd 2.3.4 - Backdoor Command Execution


AbsoluteTelnet 11.12 - _license name_ Denial of Service (PoC)


AbsoluteTelnet 11.12 - 'license name' Denial of Service (PoC)


AbsoluteTelnet 11.12 - 'SSH1/username' Denial of Service (PoC)


AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (PoC)


AbsoluteTelnet 11.21 - 'Username' Denial of Service (PoC)


AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC)


AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)


ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC)


AgataSoft PingMaster Pro 2.1 - Denial of Service (PoC)


AimOne Video Converter V2.04 Build 103 - Buffer Overflow (DoS)


APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service (PoC)


aSc TimeTables 2020.11.4 - Denial of Service (PoC)


Backup Key Recovery 2.2.5 - 'Name' Denial of Service (PoC)


Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service (PoC)


BACnet Test Server 1.01 - Remote Denial of Service (PoC)


BlueAuditor 1.7.2.0 - 'Name' Denial of Service (PoC)


BOOTP Turbo 2.0 - Denial of Service (SEH)(PoC)


Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service (PoC + SEH Overwrite)


Code Blocks 20.03 - Denial Of Service (PoC)


Core FTP LE 2.2 - Denial of Service (PoC)


Core FTP Lite 1.3 - Denial of Service (PoC)


DiskBoss 7.7.14 - Denial of Service (PoC)


Dnss Domain Name Search Software - 'Key' Denial of Service (PoC)


Dnss Domain Name Search Software - 'Name' Denial of Service (PoC)


Dota 2 7.23f - Denial of Service (PoC)


Duplicate Cleaner Pro 4 - Denial of Service (PoC)


DupTerminator 1.4.5639.37199 - Denial of Service (PoC)


Easy CD & DVD Cover Creator 4.13 - Denial of Service (PoC)


Everest 5.50.2100 - 'Open File' Denial of Service (PoC)


Filetto 1.0 - 'FEAT' Denial of Service (PoC)


Fire Web Server 0.1 - Remote Denial of Service (PoC)


FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)


FlashGet 1.9.6 - Denial of Service (PoC)


Frigate 2.02 - Denial Of Service (PoC)


Frigate 3.36 - Denial of Service (PoC)


FTPGetter Professional 5.97.0.223 - Denial of Service (PoC)


Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)


GTalk Password Finder 2.2.1 - 'Key' Denial of Service (PoC)


Hex Workshop v6.7 - Buffer overflow DoS


iDailyDiary 4.30 - Denial of Service (PoC)


Internet Download Manager 6.38.12 - Scheduler Downloads Scheduler Buffer Overflow (PoC)


Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service (PoC)


Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service (PoC)


Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)


Managed Switch Port Mapping Tool 2.85.2 - Denial of Service (PoC)


Microsoft Outlook VCF cards - Denial of Service (PoC)


Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)


Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (PoC)


Modbus Slave 7.3.1 - Buffer Overflow (DoS)


MSN Password Recovery 1.30 - Denial of Service (PoC)


NBMonitor 1.6.6.0 - 'Key' Denial of Service (PoC)


NBMonitor 1.6.8 - Denial of Service (PoC)


NetShareWatcher 1.5.8.0 - 'Key' Denial of Service (PoC)


NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service


NetworkSleuth 3.0.0.0 - 'Key' Denial of Service (PoC)


NIMax 5.3.1 - 'Remote VISA System' Denial of Service (PoC)


NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)


Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service (PoC)


Nsauditor 3.2.0.0 - 'Name' Denial of Service (PoC)


Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (PoC)


Nsauditor 3.2.3 - Denial of Service (PoC)


Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)


Odin Secure FTP Expert 7.6.3 - Denial of Service (PoC)


Office Product Key Finder 1.5.4 - Denial of Service (PoC)


Pinkie 2.15 - TFTP Remote Buffer Overflow (PoC)


Product Key Explorer 4.2.2.0 - 'Key' Denial of Service (PoC)


Product Key Explorer 4.2.7 - 'multiple' Denial of Service (PoC)


QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (PoC)


Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)


RarmaRadio 2.72.4 - 'server' Denial of Service (PoC)


RarmaRadio 2.72.4 - 'username' Denial of Service (PoC)


RarmaRadio 2.72.5 - Denial of Service (PoC)


RarmaRadio 2.72.8 - Denial of Service (PoC)


Redragon Gaming Mouse - 'REDRAGON_MOUSE.sys' Denial of Service (PoC)


Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC)


RemShutdown 2.9.0.0 - 'Key' Denial of Service (PoC)


RemShutdown 2.9.0.0 - 'Name' Denial of Service (PoC)


RTSP for iOS 1.0 - 'IP Address' Denial of Service (PoC)


Sandboxie 5.49.7 - Denial of Service (PoC)


Scdbg 1.0 - Buffer overflow DoS


ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service (PoC)


SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service (PoC)


SpotAuditor 5.3.4 - 'Name' Denial of Service (PoC)


SpotAuditor 5.3.5 - 'multiple' Denial Of Service (PoC)


SpotDialup 1.6.7 - 'Key' Denial of Service (PoC)


SpotDialup 1.6.7 - 'Name' Denial of Service (PoC)


SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service (PoC)


SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service (PoC)


SpotFTP-FTP Password Recover 2.4.8 - Denial of Service (PoC)


SpotIE 2.9.5 - 'Key' Denial of Service (PoC)


SpotIM 2.2 - 'Name' Denial Of Service


SpotMSN 2.4.6 - 'Name' Denial of Service (PoC)


SpotOutlook 1.2.6 - 'Name' Denial of Service (PoC)


SuperMailer v11.20 - Buffer overflow DoS


SyncBreeze 15.2.24 - 'login' Denial of Service


Sysax Multi Server 5.50 - Denial of Service (PoC)


Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)


TapinRadio 2.12.3 - 'address' Denial of Service (PoC)


TapinRadio 2.12.3 - 'username' Denial of Service (PoC)


TapinRadio 2.13.7 - Denial of Service (PoC)


TaskCanvas 1.4.0 - 'Registration' Denial Of Service


Telegram Desktop 2.9.2 - Denial of Service (PoC)


TextCrawler Pro3.1.1 - Denial of Service (PoC)


Top Password Firefox Password Recovery 2.8 - Denial of Service (PoC)


Top Password Software Dialup Password Recovery 1.30 - Denial of Service (PoC)


Tunnel Interface Driver - Denial of Service


UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service (PoC)


UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service (PoC)


UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (PoC)


VirtualTablet Server 3.0.2 - Denial of Service (PoC)


VMware Workstation 15 Pro - Denial of Service


Windows TCP/IP - RCE Checker and Denial of Service


XAMPP - Buffer Overflow POC


Xlight FTP 3.9.3.1 - Buffer Overflow (PoC)


Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' (DOS)


XWorm Trojan 2.1 - Null Pointer Derefernce DoS


Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service (PoC)


ZIP Password Recovery 2.30 - 'ZIP File' Denial of Service (PoC)


ZOC Terminal 7.25.5 - 'Script' Denial of Service (PoC)


ZOC Terminal v7.25.5 - 'Private key file' Denial of Service (PoC)


10-Strike Bandwidth Monitor 3.9 - Buffer Overflow (SEH) (ASLR + DEP Bypass)


10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path


10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)


10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)


10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH) (ROP)


10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH)


10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path


10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)


10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)


7 Sticky Notes v1.9 - OS Command Injection


Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe'  Unquoted Service Path


ActFax 10.10 - Unquoted Path Services


Active WebCam 11.5 - Unquoted Service Path


ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path


Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path


Advanced Host Monitor v12.56 - Unquoted Service Path


Advanced System Care Service 13 - 'AdvancedSystemCareService13' Unquoted Service Path


Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions


AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)


Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)


Allok Video Converter 4.6.1217 - Stack Overflow (SEH)


Amarok 2.8.0 - Denial-of-Service


AMD Fuel Service - 'Fuel.service' Unquote Service Path


Amica Prodigy 1.7 - Privilege Escalation


Andrea ST Filters Service 1.0.64.7 - 'Andrea ST Filters Service ' Unquoted Service Path


AnyBurn 4.8 - Buffer Overflow (SEH)


AnyDesk 5.4.0 - Unquoted Service Path


AnyDesk 7.0.15 - Unquoted Service Path


AnyDesk 9.0.1 - Unquoted Service Path


AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path


Arcsoft PhotoStudio 6.0.0.172 - Unquoted Service Path


Argus Surveillance DVR 4.0 - Unquoted Service Path


Argus Surveillance DVR 4.0 - Weak Password Encryption


aSc TimeTables 2021.6.2 - Denial of Service (PoC)


AspEmail v5.6.0.2 - Local Privilege Escalation


ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path


ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path


ASUS Control Center Express 01.06.15 - Unquoted Service Path


Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path


ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path


ASUS HID Access Service 1.0.94.0 - 'AsHidSrv.exe' Unquoted Service Path


ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow (DEP_ASLR Bypass) (PoC)


Atheros Coex Service Application 8.0.0.255 - 'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path


Atomic Alarm Clock 6.3 - Stack Overflow (Unicode+SEH)


Audio Conversion Wizard v2.01 - Buffer Overflow


Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)


Automox Agent 32 - Local Privilege Escalation


AVAST Antivirus 25.11 - Unquoted Service Path


AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path


AVG Anti Spyware 7.5 - Unquoted Service Path _AVG Anti-Spyware Guard_


AVS Audio Converter 10.3 - Stack Overflow (SEH)


B64dec 1.1.2 - Buffer Overflow (SEH Overflow + EggHunter)


BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)


Backup Key Recovery 2.2.7 - Denial of Service (PoC)


Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path


Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path


BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path


BarracudaDrive v6.5 - Insecure Folder Permissions


Battle.Net 1.27.1.12428 - Insecure File Permissions


BattlEye 0.9 - 'BEService' Unquoted Service Path


BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)


BlazeDVD 7.0 Professional - '.plf' Local Buffer Overflow (SEH_ASLR_DEP)


BlazeDVD 7.0.2 - Buffer Overflow (SEH)


Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service Path


Bonjour Service 'mDNSResponder.exe' - Unquoted Service Path Privilege Escalation


BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path


BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path


Boxoft Audio Converter 2.3.0 - '.wav' Buffer Overflow (SEH)


Boxoft Convert Master 1.3.0 - 'wav' SEH Local Exploit


BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path


Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path


Brother BRPrint Auditor - 'Multiple' Unquoted Service Path


bVPN 2.5.1 - 'waselvpnserv' Unquoted Service Path


Cain & Abel 4.9.56 - Unquoted Service Path


Canon Inkjet Extended Survey Program 5.1.0.8 - 'IJPLMSVC.EXE'  - Unquoted Service Path


Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path


Cloudflare WARP 1.4 - Unquoted Service Path


CloudMe 1.11.2 - Buffer Overflow (SEH_DEP_ASLR)


CloudMe 1.11.2 - Buffer Overflow ROP (DEP_ASLR)


Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)


Cobian Backup 0.9 - Unquoted Service Path


Cobian Backup 11 Gravity 11.2.0.582 - 'Password' Denial of Service (PoC)


Cobian Backup Gravity 11.2.0.582 - 'CobianBackup11' Unquoted Service Path


Cobian Reflector 0.9.93 RC1 - 'Password' Denial of Service (PoC)


Code Blocks 16.01 - Buffer Overflow (SEH) UNICODE


Code Blocks 17.12 - 'File Name' Local Buffer Overflow (Unicode) (SEH) (PoC)


CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path


Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path


Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service Path


CONTPAQi(R) AdminPAQ 14.0.0 - Unquoted Service Path


CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path


CrowdStrike Falcon AGENT  6.44.15806  - Uninstall without Installation Token


Cuckoo Clock v5.0 - Buffer Overflow


Cyberfox Web Browser 52.9.1 - Denial of Service (PoC)


Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)


Dameware Remote Support 12.1.1.273 - Buffer Overflow (SEH)


dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow (PoC)


Deep Instinct Windows Agent 1.2.24.0 - 'DeepNetworkService' Unquoted Service Path


Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path


DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)


Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation


DHCP Broadband 4.1.0.1503 - 'dhcpt.exe' Unquoted Service Path


DHCP Turbo 4.61298 - 'DHCP Turbo 4' Unquoted Service Path


DigitalPersona 4.5.0.2213 - 'DpHostW' Unquoted Service Path


DigitalPersona 5.1.0.656 'DpHostW' - Unquoted Service Path


Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path


Disk Savvy Enterprise 12.3.18 - Unquoted Service Path


Disk Sorter Enterprise 12.4.16 - 'Disk Sorter Enterprise' Unquoted Service Path


Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path


Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path


DiskBoss 7.7.14 - 'Input Directory' Local Buffer Overflow (PoC)


DiskBoss 7.7.14 - 'Reports and Data Directory' Buffer Overflow (SEH Egghunter)


DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path


DiskBoss v11.7.28 - Multiple Services Unquoted Service Path


DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path


Docker-Credential-Wincred.exe - Privilege Escalation (Metasploit)


docPrint Pro 8.0 - 'Add URL' Buffer Overflow (SEH Egghunter)


Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path


Druva inSync Windows Client 6.5.2 - Local Privilege Escalation


Druva inSync Windows Client 6.6.3 - Local Privilege Escalation


Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)


Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path


DVD Photo Slideshow Professional 8.07 - 'Key' Buffer Overflow


DVD Photo Slideshow Professional 8.07 - 'Name' Buffer Overflow


Dynojet Power Core 2.3.0 - Unquoted Service Path


EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path


Easy MPEG to DVD Burner 1.7.11 - Buffer Overflow (SEH + DEP)


Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)


eBeam education suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path


Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path


ELAN Smart-Pad 11.10.15.1 - 'ETDService' Unquoted Service Path


ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path


Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path


EmEditor 19.8 - Insecure File Permissions


Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path


Epic Games Easy Anti-Cheat 4.0 - Local Privilege Escalation


Epic Games Rocket League 1.95 - Stack Buffer Overrun


ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path


EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path


EPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service Path


Epson USB Display 1.6.0.0 - 'EMP_UDSA' Unquoted Service Path


ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path


ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path


Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)


Exploit - EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path


Explorer32++ v1.3.5.531 - Buffer overflow


Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path


FastStone Image Viewer 7.5 - .cur BITMAPINFOHEADER 'BitCount' Stack Based Buffer Overflow (ASLR & DEP Bypass)


File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control


File Sanitizer for HP ProtectTools 5.0.1.3 - 'HPFSService' Unquoted Service Path


FileZilla Client 3.63.1 - 'TextShaping.dl' DLL Hijacking


Filmora 12 version ( Build 1.0.0.7) - Unquoted Service Paths Privilege Escalation


FLAME II MODEM USB - Unquoted Service Path


Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission


ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path


Foxit PDF Reader 11.0 - Unquoted Service Path


Foxit Reader 9.0.1.1049 - Arbitrary Code Execution


Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)


Free MP3 CD Ripper 2.8 - Multiple File Buffer Overflow (Metasploit)


Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)


Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow


freeFTPd v1.0.13 - 'freeFTPdService' Unquoted Service Path


FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path


FreeSSHd 1.3.1 - 'FreeSSHDService' Unquoted Service Path


Frhed (Free hex editor) v1.6.0 - Buffer overflow


Frigate 3.36 - Buffer Overflow (SEH)


Frigate 3.36.0.9 - 'Command Line' Local Buffer Overflow (SEH) (PoC)


Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer Overflow (SEH) (PoC)


Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)


FTPDummy 4.80 - Local Buffer Overflow (SEH)


Game Jackal Server v5 - Unquoted Service Path _GJServiceV5_


General Device Manager 2.5.2.2 - Buffer Overflow (SEH)


Genexus Protection Server 9.6.4.2 - 'protsrvservice' Unquoted Service Path


Genexus Protection Server 9.7.2.10 - 'protsrvservice' Unquoted Service Path


GeoGebra CAS Calculator 6.0.631.0 - Denial of Service (PoC)


GeoGebra Classic 5.0.631.0-d - Denial of Service (PoC)


GeoGebra Graphing Calculator 6.0.631.0 - Denial Of Service (PoC)


GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure


Gestionale Open 11.00.00 - Local Privilege Escalation


Gestionale Open 12.00.00 - 'DB_GO_80' Unquoted Service Path


Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path


GoldWave - Buffer Overflow (SEH Unicode)


GOM Player 2.3.90.5360 - Buffer Overflow (PoC)


Grand Theft Auto III/Vice City Skin File v1.1 - Buffer Overflow


GreenShot  1.2.10 - Insecure Deserialization Arbitrary Code Execution


Guild Wars 2 - Insecure Folder Permissions


HCL Lotus Notes V12 - Unquoted Service Path


HDD Health 4.2.0.112 - 'HDDHealth' Unquoted Service Path


Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path


HMA VPN 5.3 - Unquoted Service Path


HomeGuard Pro 9.3.1 - Insecure Folder Permissions


HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path


HP Display Assistant x64 Edition 3.20 - 'DTSRVC' Unquoted Service Path


HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path


HP System Event 1.2.9.0 - 'HPWMISVC' Unquoted Service Path


HP System Event Utility - Local Privilege Escalation


HP WMI Service 1.4.8.0 - 'HPWMISVC.exe' Unquoted Service Path


HTTPDebuggerPro 9.11 - Unquoted Service Path


Hubstaff 1.6.14-61e5e22e - 'wow64log' DLL Search Order Hijacking


IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow


IcoFX 2.6 - '.ico' Buffer Overflow SEH + DEP Bypass using JOP


iDeskService 3.0.2.1 - 'iDeskService' Unquoted Service Path


IDT PC Audio 1.0.6425.0 - 'STacSV' Unquoted Service Path


IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path


IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path


iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path


Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions


Input Director 1.4.3 - 'Input Director' Unquoted Service Path


Intel(R) Audio Service x64 01.00.1080.0 - 'IntelAudioService' Unquoted Service Path


Intel(r) Management and Security Application 5.2 - User Notification Service Unquoted Service Path


Intel(R) Management Engine Components 6.0.0.1189 - 'LMS' Unquoted Service Path


Intel(R) Matrix Storage Event Monitor x86 8.0.0.1039 - 'IAANTMON' Unquoted Service Path


Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service Path


Internet Download Manager 6.37.11.1 - Stack Buffer Overflow (PoC)


IObit Uninstaller 10 Pro - Unquoted Service Path


IObit Uninstaller 9.5.0.15 - 'IObit Uninstaller Service' Unquoted Service Path


IOTransfer V4 - Unquoted Service Path


IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path


IPTInstaller 4.0.9 - 'PassThru Service' Unquoted Service Path


Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path


Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH)


Kingo ROOT 1.5.8 - Unquoted Service Path


Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path


Kite 1.2021.610.0 - Unquoted Service Path


KiteService 1.2020.1113.1 - 'KiteService.exe' Unquoted Service Path


KiteService 1.2020.618.0 - Unquoted Service Path


KiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow


KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow


KiTTY 0.76.1.13 - Command Injection


KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path


LaborOfficeFree 19.10 - MySQL Root Password Calculator


LanSend 3.2 - Buffer Overflow (SEH)


Lansweeper 7.2 - Incorrect Access Control


Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path


LCD_Service 1.0.1.0 - 'LCD_Service' Unquote Service Path


Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path


Logitech Solar Keyboard Service - 'L4301_Solar' Unquoted Service Path


LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path


MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path


Macro Expert 4.7 - Unquoted Service Path


Macro Expert 4.9 - Unquoted Service Path


Magic Mouse 2 utilities  2.20 - 'magicmouse2service' Unquoted Service Path


Malwarebytes 4.5 - Unquoted Service Path


McAfee(R) Safe Connect VPN - Unquoted Service Path Elevation Of Privilege


Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path


MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path


Memu Play 7.1.3 - Insecure Folder Permissions


Microsoft - NTLM Hash Disclosure Spoofing (library-ms)


Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege


Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)


Microsoft Excel Use After Free - Local Code Execution


Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path


Microsoft Exchange Active Directory Topology 15.02.1118.007 - 'Service MSExchangeADTopology' Unquoted Service Path


Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path


Microsoft Gaming Services 2.52.13001.0 - Unquoted Service Path


Microsoft GamingServices 2.47.10001.0 - 'GamingServices' Unquoted Service Path


Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges


Microsoft Internet Explorer / ActiveX Control - Security Bypass


Microsoft Internet Explorer 11 - Use-After-Free


Microsoft Internet Explorer 11 32-bit - Use-After-Free


Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free


Microsoft MMC MSC EvilTwin - Local Admin Creation


Microsoft NET USE win10 - Insufficient Authentication Logic


Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)


Microsoft Windows - 'WizardOpium' Local Privilege Escalation


Microsoft Windows - CryptoAPI (Crypt32.dll) Elliptic Curve Cryptography (ECC) Spoof Code-Signing Certificate


Microsoft Windows - Shell COM Server Registrar Local Privilege Escalation


Microsoft Windows - Storage QoS Filter Driver Checker


Microsoft Windows - Win32k Elevation of Privilege


Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing


Microsoft Windows .Group File - Code Execution


Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass


Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation


Microsoft Windows 10 - Theme API 'ThemePack' File Parsing


Microsoft Windows 10 build 1809 - Local Privilege Escalation (UAC Bypass)


Microsoft Windows 10.0.17763.5458 - Kernel Privilege Escalation


Microsoft Windows 11 - 'apds.dll' DLL hijacking (Forced)


Microsoft Windows 11 - Kernel Privilege Escalation


Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege


Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation


Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege


Microsoft Windows cmd.exe - Stack Buffer Overflow


Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G


Microsoft Windows Defender - Detections Bypass


Microsoft Windows Defender / Trojan.Win32/Powessere.G - Detection Mitigation Bypass


Microsoft Windows Kernel - Information Disclosure


Microsoft Windows Media Center WMV / WMA 6.3.9600.16384 - Code Execution


Microsoft Windows Server 2016 - Win32k Elevation of Privilege


Microsoft Windows Server 2025 Hyper-V NT Kernel Integration VSP - Elevation of Privilege


MilleGPG5 5.7.2 Luglio 2021 - Local Privilege Escalation


MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control


Millewin 13.39.146.1 - Local Privilege Escalation


MiniTool Partition Wizard - Unquoted Service Path


MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path _MTAgentService_


MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path _MTSchedulerService_


MiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service Path


MobileTrans  4.0.11 - Weak Service Privilege Escalation


Motorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service Path


Motorola Device Manager 2.5.4 - 'ForwardDaemon.exe ' Unquoted Service Path


Motorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service Path


Mozilla Firefox 67 - Array.pop JIT Type Confusion


Mozilla Firefox 88.0.1 - File Extension Execution of Arbitrary Code


mRemoteNG v1.77.3.1784-NB - Cleartext Storage of Sensitive Information in Memory


MSI Ambient Link Driver 1.0.0.8 - Local Privilege Escalation


MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation


MTPutty 1.0.1.21 - SSH Password Disclosure


MyVideoConverter Pro 3.14 - 'Movie' Buffer Overflow


MyVideoConverter Pro 3.14 - 'Output Folder' Buffer Overflow


MyVideoConverter Pro 3.14 - 'TVSeries' Buffer Overflow


NCH Express Invoice - Clear Text Password Storage and Account Takeover


NEOWISE CARBONFTP 1.4 - Weak Password Encryption


NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path


Netgear Genie 2.4.64 - Unquoted Service Path


NetIQ/Microfocus Performance Endpoint v5.1 - remote root/SYSTEM exploit


NetPCLinker 1.0.0.0 - Buffer Overflow (SEH Egghunter)


Nidesoft 3GP Video Converter 2.6.18 - Local Stack Buffer Overflow


Nidesoft DVD Ripper 5.2.18 - Local Buffer Overflow (SEH)


Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path


Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))


NVClient v5.0 - Stack Buffer Overflow (DoS)


NVIDIA Update Service Daemon 1.0.21 - 'nvUpdatusService' Unquoted Service Path


OCS Inventory NG 2.3.0.0 - Unquoted Service Path


Odoo 12.0.20190101 - 'nssm.exe' Unquoted Service Path


OKI sPSV Port Manager 1.0.41 - 'sPSVOpLclSrv' Unquoted Service Path


OpenClinic GA 5.194.18 - Local Privilege Escalation


OpenTFTP 1.66 - Local Privilege Escalation


Oracle Database 11g Release 2 - 'OracleDBConsoleorcl' Unquoted Service Path


Oracle Database 12c Release 1 - Unquoted Service Path


OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path


Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path


Outline V1.6.0 - Unquoted Service Path


OutSystems Service Studio 11.53.30 - DLL Hijacking


PaperStream IP (TWAIN) 1.42.0.5685 - Local Privilege Escalation


PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path


PDFCOMPLETE Corporate Edition 4.1.45 - 'pdfcDispatcher' Unquoted Service Path


Pearson Vue VTS 2.3.1911 Installer - 'VUEApplicationWrapper' Unquoted Service Path


Pearson Vue VTS 2.3.1911 Installer - VUEApplicationWrapper Unquoted Service Path


Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path


Plantronics Hub 3.13.2 - Local Privilege Escalation


Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation (Metasploit)


Plantronics Hub 3.25.1 - Arbitrary File Read


Popcorn Time 6.2 - 'Update service' Unquoted Service Path


Port Forwarding Wizard 4.8.0 - Buffer Overflow (SEH)


PortableKanban 4.3.6578.38136 - Encrypted Password Retrieval


Prey 1.9.6 - _CronService_ Unquoted Service Path


Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path


Printix Client 1.3.1106.0 - Privilege Escalation


Privacy Drive v3.17.0 - 'pdsvc.exe' Unquoted Service Path


Private Internet Access 3.3 - 'pia-service' Unquoted Service Path


Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path


ProtonVPN 1.26.0 - Unquoted Service Path


PTPublisher v2.3.4 - Unquoted Service Path


QNAP QVR Client 5.0.0.13230 - 'QVRService' Unquoted Service Path


Quick N Easy FTP Service 3.2 - Unquoted Service Path


Quick Player 1.3 - '.m3l' Buffer Overflow (Unicode & SEH)


RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)


Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path


Rapid7 Nexpose Installer 6.6.39 - 'nexposeengine' Unquoted Service Path


RDP Manager 4.9.9.3 - Denial-of-Service (PoC)


Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)


Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)


Realtek Andrea RT Filters 1.0.64.10 - 'AERTSr64.EXE' Unquoted Service Path


Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path


Realtek Audio Service 1.0.0.55 - 'RtkAudioService64.exe' Unquoted Service Path


Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path


RealTimes Desktop Service 18.1.4 - 'rpdsvc.exe' Unquoted Service Path


Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH)


Remote Mouse 4.002 - Unquoted Service Path


Remote Mouse GUI 3.008 - Local Privilege Escalation


Resource Hacker v3.6.0.92 - Buffer overflow


Ricoh Driver - Privilege Escalation (Metasploit)


Ricoh Printer Drivers - Local Privilege Escalation


RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow (EggHunter) (SEH) (PoC)


RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow (SEH)


Rockstar Service - Insecure File Permissions


RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution


Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)


Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path


Sandboxie Plus 0.7.4 - 'SbieSvc' Unquoted Service Path


Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path


Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path


SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path


SAPSetup Automatic Workstation Update Service 750 - 'NWSAPAutoWorkstationUpdateSvc' Unquoted Service Path


SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path


Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation


ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path


Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path


Simple Startup Manager 1.17 - 'File' Local Buffer Overflow (PoC)


Snes9K 0.09z - 'Port Number' Buffer Overflow (SEH)


Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow (SEH Egghunter)


Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path


SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path


SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path


SolarWinds MSP PME Cache Service 1.1.14 - Insecure File Permissions


Solstice Pod 6.2 - API Session Key Extraction via API Endpoint


Sonar Qube 8.3.1 - 'SonarQube Service' Unquoted Service Path


SonicWall NetExtender 10.2.0.300 -  Unquoted Service Path


Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x  -  Denial Of Service (DoS)


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x  - Authorization Bypass (IDOR)


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authentication Bypass


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Cross-Site Request Forgery


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Exploit


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution (RCE)


SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Unauthenticated Factory Reset


SOUND4 Server Service 4.1.102 - Local Privilege Escalation


SOYAL 701 Client 9.0.1 - Insecure Permissions


SOYAL 701 Server 9.0.1 - Insecure Permissions


Splashtop 8.71.12001.0 - Unquoted Service Path


SprintWork 2.3.1 - Local Privilege Escalation


Spy Emergency 25.0.650 - 'Multiple' Unquoted Service Path


SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path


SQLite 3.50.1 - Heap Overflow


Stonesoft VPN Client 6.2.0 / 6.8.0 - Local Privilege Escalation


StreamRipper32 2.6 - Buffer Overflow (PoC)


SugarSync 4.1.3 - 'SugarSync Service' Unquoted Service Path


Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path


Sync Breeze Enterprise 12.4.18 - 'Sync Breeze Enterprise' Unquoted Service Path


Syncplify.me Server! 5.0.37 - 'SMWebRestServicev5' Unquoted Service Path


Sysax FTP Automation 6.9.0 - Privilege Escalation


SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path


System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path


System Mechanic v15.5.0.61 - Arbitrary Read/Write


TCQ - ITeCProteccioAppServer.exe - Unquoted Service Path


TDM Digital Signage PC Player 4.1 - Insecure File Permissions


TeamSpeak 3.5.6 - Insecure File Permissions


TFTP Broadband 4.3.0.1465 - 'tftpt.exe' Unquoted Service Path


TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path


Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path


Tftpd64 4.64 - 'Tftpd32_svc' Unquoted Service Path


Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation


Torrent 3GP Converter 1.51 - Stack Overflow (SEH)


Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)


Torrent iPod Video Converter 1.51 - Stack Overflow


TOSHIBA DVD PLAYER Navi Support Service - 'TNaviSrv' Unquoted Service Path


TotalAV 2020 4.14.31 - Privilege Escalation


TotalAV 5.15.69 - Unquoted Service Path


Trend Micro Maximum Security 2019 - Arbitrary Code Execution


Trend Micro Maximum Security 2019 - Privilege Escalation


Trend Micro OfficeScan Client 10.0 - ACL Service LPE


TRIGONE Remote System Monitor 3.61 - Unquoted Service Path


Triologic Media Player 8 - '.m3l' Buffer Overflow (Unicode) (SEH)


Typora v1.7.4 - OS Command Injection


UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path


USB Flash Drives Control 4.1.0.0 - Unquoted Service Path


VeeVPN 1.6.1 - Unquoted Service Path


Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths


Veyon 4.3.4 - 'VeyonService' Unquoted Service Path


Veyon 4.4.1 - 'VeyonService' Unquoted Service Path


VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path


VirtualBox 7.0.16 - Privilege Escalation


Visual Studio Code 1.47.1 - Denial of Service (PoC)


VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path


VPN unlimited 6.1 - Unquoted Service Path


VUPlayer 2.49 - '.wax' Local Buffer Overflow (DEP Bypass)


VUPlayer 2.49 .m3u - Local Buffer Overflow (DEP_ASLR)


VX Search 13.5.28 - 'Multiple' Unquoted Service Path


Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow


Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow


WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path


WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path


WinAVR Version 20100110 - Insecure Folder Permissions


Windows 11 10.0.22000 -  Backup service Privilege Escalation


Windows 11 22h2 - Kernel Privilege Elevation


Windows Kernel - Elevation of Privilege


Windows MultiPoint Server 2011 SP1 - RpcEptMapper and Dnschade Local Privilege Escalation


Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software


Windscribe - WindscribeService Named Pipe Privilege Escalation (Metasploit)


Windscribe 1.83 - 'WindscribeService' Unquoted Service Path


Wing FTP Server 6.2.3 - Privilege Escalation


WinGate 9.4.1.5998 - Insecure Folder Permissions


Winpakpro 4.8 - 'GuardTourService' Unquoted Service Path


Winpakpro 4.8 - 'ScheduleService' Unquoted Service Path


Winpakpro 4.8 - 'WPCommandFileService' Unquoted Service Path


Winstep 18.06.0096 - 'Xtreme Service' Unquoted Service Path


WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control


Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path


Wondershare Dr Fone 12.9.6 - Privilege Escalation


Wondershare Dr.Fone 11.4.10 - Insecure File Permissions


Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path


Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path


Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)


Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path


Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path


Wondershare Filmora 12.2.9.2233 - Unquoted Service Path


Wondershare MirrorGo 2.0.11.346 - Insecure File Permissions


Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path


Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path


Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path


WorkTime 10.20 Build 4967 - Unquoted Service Path


WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Path


XAMPP 7.4.3 - Local Privilege Escalation


XAMPP 8.2.4 - Unquoted Path


XMLBlueprint 16.191112 - XML External Entity Injection


YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)


Zillya Total Security 3.0.2367.0  - Local Privilege Escalation


Zortam Mp3 Media Studio 27.60 - Remote Code Execution (SEH)


Adobe ColdFusion 11 - LDAP Java Object Deserialization Remode Code Execution (RCE)


Anviz CrossChex - Buffer Overflow (Metasploit)


Apache ActiveMQ 5.x-5.11.1 - Directory Traversal Shell Upload (Metasploit)


Archeevo 5.0 - Local File Inclusion


ASUS Remote Link 1.1.2.13 - Remote Code Execution


CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow


CloudMe 1.11.2 - Buffer Overflow (PoC)


CompleteFTP Professional 12.1.3 - Remote Code Execution


CoreFTP 2.0 Build 674 MDTM - Directory Traversal (Metasploit)


CoreFTP 2.0 Build 674 SIZE - Directory Traversal (Metasploit)


CoreFTP Server build 725 - Directory Traversal (Authenticated)


DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)


Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow


Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)


Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)


Exchange Control Panel - Viewstate Deserialization (Metasploit)


Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass


freeSSHd 1.0.9 - Denial of Service (DoS)


GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)


Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)


GOM Player 2.3.90.5360 - Remote Code Execution (RCE)


HFS (HTTP File Server) 2.3.x - Remote Command Execution (3)


Huawei HedEx Lite 200R006C00SPC005 - Path Traversal


Inbit Messenger v4.9.0 - Unauthenticated Remote Command Execution (RCE)


Inbit Messenger v4.9.0 - Unauthenticated Remote SEH Overflow


Internet Download Manager v6.41 Build 3 - Remote Code Execution (RCE)


IOTransfer 4.0 - Remote Code Execution (RCE)


Ivanti Avalanche <v6.4.0.0 - Remote Code Execution


Kardex Mlog MCC 5.7.12 - RCE (Remote Code Execution)


ManageEngine ADSelfService Plus 6.1 - User Enumeration


ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure


Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)


Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)


Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure


Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS)


Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)


Microsoft Exchange 2019 - Server-Side Request Forgery


Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution


Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure


Microsoft Outlook - Remote Code Execution (RCE)


Microsoft PowerPoint 2019 - Remote Code Execution (RCE)


Microsoft SharePoint - Deserialization Remote Code Execution


Microsoft SharePoint 2019 - NTLM Authentication


Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)


Microsoft SQL Server Reporting Services 2016 - Remote Code Execution


Microsoft Windows - 'SMBGhost' Remote Code Execution


Microsoft Windows - NTLM Hash Leak Malicious Windows Theme


Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure


Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)


minaliC 2.0.0 - Denied of Service


Mobile Mouse 3.6.0.4 - Remote Code Execution (RCE)


Neowise CarbonFTP 1.4 - Insecure Proprietary Password Encryption


Oliver Library Server v5 - Arbitrary File Download


Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion


PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow


PCMan FTP Server 2.0.7 - Buffer Overflow


Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)


Prime95 Version 30.7 build 9 - Remote Code Execution (RCE)


Printix Client 1.3.1106.0 - Remote Code Execution (RCE)


ProSSHD 1.2 20090726 - Denial of Service (DoS)


Prowise Reflect v1.0.9 - Remote Keystroke Injection


Razer Chroma SDK Server 3.16.02 - Race Condition Remote File Execution


Remote Desktop Web Access - Authentication Timing Attack (Metasploit Module)


Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)


SharePoint Workflows - XOML Injection (Metasploit)


SmarterMail Build 6985 - Remote Code Execution


TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)


TitanFTP 2.0.1.2102 - Path traversal to Remote Code Execution (RCE)


TSPlus 16.0.0.0 - Remote Work Insecure Credential storage


TSplus 16.0.0.0 - Remote Work Insecure Files and Folders


TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions


Unified Remote 3.13.0 - Remote Code Execution (RCE)


Unified Remote 3.9.0.2463 - Remote Code Execution


Virtua Software Cobranca 12S - SQLi


WebCatalog 48.4 - Arbitrary Protocol Execution


WebDAV Windows 10 - Remote Code Execution (RCE)


WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page


WiFi Mouse 1.7.8.5 - Remote Code Execution


WiFi Mouse 1.7.8.5 - Remote Code Execution(v2)


WiFi Mouse 1.8.3.2 - Remote Code Execution (RCE)


WiFiMouse 1.8.3.4 - Remote Code Execution (RCE)


Windows 10 v21H1 - HTTP Protocol Stack Remote Code Execution


Windows 10.0.17763.7009 - spoofing vulnerability


windows 10/11 - NTLM Hash Disclosure Spoofing


Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)


Windows 2024.15 - Unauthenticated Desktop Screenshot Capture


Windows File Explorer Windows 10 Pro x64 - TAR Extraction


Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure


Wing FTP Server 4.3.8 - Remote Code Execution (RCE) (Authenticated)


WinRAR version 6.22 - Remote Code Execution via ZIP archive


Wondershare Dr.Fone 12.0.7 - Remote Code Execution (RCE)


YATinyWinFTP - Denial of Service (PoC)


ZeroLogon - Netlogon Elevation of Privilege


Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting (XSS)


Alt-N MDaemon webmail 20.0.0 - 'file name' Stored Cross Site Scripting (XSS)


Arteco Web Client DVR/NVR - 'SessionId' Brute Force


Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read


Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read


easy-mock 1.6.0 - Remote Code Execution (RCE) (Authenticated)


eScan Management Console 14.0.1400.2281 - Cross Site Scripting


eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)


HTTP Commander 3.1.9 - Stored Cross Site Scripting (XSS)


Kibana 6.6.1 - CSV Injection


ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure


Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape


Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)


Microsoft Exchange 2019 - Unauthenticated Email Download


Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)


Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forgery (SSRF)


Mini Mouse 9.2.0 - Path Traversal


Mini Mouse 9.2.0 - Remote Code Execution


NoteBurner 2.35 - Denial Of Service (DoS) (PoC)


PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS


Rejetto HttpFileServer 2.3.x - Remote Command Execution (3)


Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)


ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1)


Spiceworks 7.5 - HTTP Header Injection


SyncBreeze 10.0.28 - 'login' Denial of Service (Poc)


SyncBreeze 10.0.28 - 'password' Remote Buffer Overflow


SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow


TripSpark VEO Transportation - Blind SQL Injection


Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path


Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)


Firefox 72 IonMonkey - JIT Type Confusion


Microsoft Internet Explorer 11 and WPAD service 'Jscript.dll' - Use-After-Free


Microsoft Windows 10 (19H1 1901 x64) - 'ws2ifsl.sys' Use After Free Local Privilege Escalation (kASLR kCFG SMEP)


Microsoft Windows Defender - VBScript Detection Bypass


Microsoft Windows Defender Bypass - Detection Mitigation Bypass


Terratec dmx_6fire USB - Unquoted Service Path


Windows PowerShell - Event Log Bypass Single Quote Code Execution


IBM i Access Client Solutions v1.1.2 - 1.1.4_ v1.1.4.3 - 1.1.9.4 - Remote Credential Theft


Easy XML Editor 1.7.8 - XML External Entity Injection


MSN Password Recovery 1.30 - XML External Entity Injection


Microsoft Windows mshta.exe 2019 - XML External Entity Injection


BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection


Citrix XenMobile Server 10.8 - XML External Entity Injection


ExpertGPS 6.38 - XML External Entity Injection


MAN-EAM-0003 V3.2.4 - XXE