CVE-2025-13257

creationtimestamp| type| source ---|---|--- 2025-11-17 03:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5scr2ewma26...

CVE-2025-13257

CVE-2025-13257 affects itsourcecode Inventory Management System 1.0, with the vulnerable element in /admin/user/index.php?view=edit. The issue is an SQL injection caused by manipulation of the ID parameter, exploitable remotely. Public exploits have been disclosed. Documented impact indicates hig...

CVE-2019-13257

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa...

CVE-2024-13257

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

CVE-2024-13257

The Drupal Commerce View Receipt module (versions 0.0.0 through 1.0.2 ) is vulnerable to an Incorrect Authorization flaw (CWE-863). Due to insufficient authorization procedures, a remote attacker can bypass security restrictions to perform a Forceful Browsing attack, potentially viewing private i...

CVE-2024-13257 Commerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

CVE-2018-13257

creationtimestamp| type| source ---|---|--- 2024-02-23 14:41:17+00:00| seen| https://t.me/ctinow/191763...

CVE-2018-13257

The CVE-2018-13257 vulnerability affects Blackboard Learn (2018-07-02) in the bb-auth-provider-cas authentication module. The issue is HTTP host header spoofing during CAS service ticket validation, enabling a phishing attack from the CAS server login page. Connected records consistently describe...

CVE-2019-13257

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa...

CVE-2019-13257

XnView Classic 2.48 is affected by CVE-2019-13257, described as a User Mode Write AV starting at xnview+0x00000000003273aa. Connected sources corroborate a memory/write access violation in XnView Classic 2.48. The CVSS data indicates a Local attack with high impact (AV/L, AC/L, PR/N, UI/R, C/H/I/...

CVE-2017-13257

CVE-2017-13257 affects Android. The issue is a use-after-free in bta_pan_data_buf_ind_cback (bta_pan_act.cc) that can lead to an out-of-bounds read of memory allocated via malloc, resulting in information disclosure. Exploitation details are not provided beyond a note that user interaction is req...

CVE-2017-13257

In btapandatabufindcback of btapanact.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...