Lucene search
K

12 matches found

Circl
Circl
added 2026/02/06 3:27 a.m.3 views

CVE-2025-10258

creationtimestamp| type| source ---|---|--- 2026-02-06 03:27:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3me5xiup5fr2d...

6.3CVSS5AI score0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/02/05 8:16 a.m.2 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.8AI score0.00018EPSS
Exploits0References1
exploitpack
exploitpack
added 2019/09/16 12:0 a.m.42 views

Symantec Advanced Secure Gateway (ASG) ProxySG - Unrestricted File Upload

Symantec Advanced Secure Gateway ASG ProxySG - Unrestricted File Upload ===========Security Intelligence============ Vendor Homepage: adobe.com Version: 2018 Tested on: Adobe ColdFusion 2018 Exploit Author: Pankaj Kumar Thakur Nepal ==========Table of Contents============== Overview Detailed...

8.5CVSS0.61943EPSS
Exploits7
OSV
OSV
added 2018/05/01 7:29 p.m.0 views

CVE-2018-10258

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution...

8.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2018/05/01 7:29 p.m.9 views

CVE-2018-10258

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution...

8.8CVSS9AI score0.02613EPSS
Exploits5References2
CVE
CVE
added 2018/05/01 7:0 p.m.51 views

CVE-2018-10258

Shopy Point of Sale v1.0 is affected by a CSV Injection vulnerability (CVE-2018-10258). A low-privilege user can craft data that, when exported to CSV, executes commands on the system. Exploitation details appear in multiple sources, including PoC steps showing adding =cmd|'/C calc'!A1 to a custo...

8.8CVSS8.9AI score0.02613EPSS
Exploits5References2Affected Software1
Exploit DB
Exploit DB
added 2018/04/25 12:0 a.m.37 views

Shopy Point of Sale 1.0 - CSV Injection

Exploit Title: Shopy Point of Sale v1.0 - CSV Injection Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10258 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/shopy-point-of-sales/21730225 Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.13 Release Date...

8.8CVSS8.9AI score0.02613EPSS
Exploits5
0day.today
0day.today
added 2018/04/25 12:0 a.m.33 views

Shopy Point of Sale v1.0 - CSV Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Shopy Point of Sale v1.0 - CSV Injection Exploit Author: 8bitsec CVE: CVE-2018-10258 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/shopy-point-of-sales/21730225 Version: 1.0 Tested on: Kali...

0.02613EPSS
Exploits5
CVE
CVE
added 2018/04/11 2:0 p.m.76 views

CVE-2016-10258

Symantec ASG/ProxySG are affected by CVE-2016-10258 (Unrestricted file upload) in management consoles. A malicious appliance administrator can upload arbitrary files and trick another admin into downloading/executing them. The issue is mitigated by upgrading to specified versions: ProxySG 6.5.10....

6.8CVSS6.8AI score0.10463EPSS
Exploits2References3Affected Software1
Symantec
Symantec
added 2018/04/10 8:0 a.m.40 views

SA162: Multiple ASG and ProxySG Vulnerabilities

SUMMARY The Symantec ASG and ProxySG management consoles are susceptible to several vulnerabilities. A remote attacker, with access to the management console, can cause denial of service through management console application crashes. A malicious appliance administrator can also inject arbitrary...

6CVSS1.4AI score0.10463EPSS
Exploits2Affected Software2
CVE
CVE
added 2017/08/08 3:0 p.m.51 views

CVE-2017-10258

The CVE-2017-10258 vulnerability affects Oracle PeopleSoft Enterprise PRTL Interaction Hub (subcomponent: Add New Image) in version 9.1.0. It enables an unauthenticated, network-accessible attacker (via HTTP) to read and modify data, with human interaction required. The issue’s root cause and pre...

6.1CVSS5.5AI score0.00463EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2015/07/07 12:0 a.m.29 views

Fedora Update for rubygem-jquery-rails FEDORA-2015-10258

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.00242EPSS
Exploits1References2
Rows per page
Query Builder