CVE-2026-13532

creationtimestamp| type| source ---|---|--- 2026-06-29 08:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3cpev2p2y 2026-06-29 10:46:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcqd2fox2g 2026-06-29 19:55:28+00:00| seen|...

CVE-2026-13532 itsourcecode Hospital Management System departmentDoctor.php sql injection

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /departmentDoctor.php. This manipulation of the argument deptid causes sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2019-13532

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2025-13532

creationtimestamp| type| source ---|---|--- 2025-12-24 00:08:53+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3maoxvmrw5s27...

CVE-2024-13532

creationtimestamp| type| source ---|---|--- 2025-02-12 11:36:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113990709281718324 2025-02-12 12:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5nvolko2h 2025-02-12 13:10:37+00:00| seen|...

CVE-2024-13532

CVE-2024-13532 affects the Small Package Quotes – Purolator Edition WordPress plugin (versions

CVE-2024-13532 Small Package Quotes – Purolator Edition <= 3.6.4 - Unauthenticated SQL Injection

The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2020-13532

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13532

Dream Report 5 R20-2 is affected by CVE-2020-13532. Talos confirms a privilege-escalation via replacing the Syncfusion Dashboard Service binary when Dream Report is installed by default in C:\ODS with weak permissions, allowing an attacker to escalate to NT SYSTEM by providing a malicious file. R...

Dream Report platform privilege escalation vulnerability

Summary Multiple privilege escalation vulnerabilities exist in Dream Report 5 R20-2. A specially crafted executable can cause elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Dream Report 5 R20-2 Product URLs https://dreamreport.net/...

CVE-2019-13532

The CVE applies to the CODESYS V3 web server (CmpWebServer) used in multiple CODESYS runtime products. Affected: all versions prior to 3.5.14.10 of the CODESYS V3 web server. Root cause: path traversal via specially crafted HTTP/HTTPS requests that may allow access to files outside the restricted...

3S-Smart Software Solutions GmbH CODESYS V3 Web Server

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: 3S-Smart Software Solutions GmbH Equipment: CODESYS V3 web server Vulnerabilities: Path Traversal, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2018-13532

CVE-2018-13532 concerns the Mindexcoin Ethereum token. The issue is in the contract’s mintToken function, where an integer overflow allows the contract owner to arbitrarily set any user’s balance. Public sources in connected documents confirm the vulnerability and its impact: an attacker could in...

technobuffalo.com XSS vulnerability

Vulnerable URL: https://www.technobuffalo.com/?q=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13532 VIP website status:| Yes...