10 matches found
CVE-2025-13556 Campcodes Online Polling System checklogin.php sql injection
A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing a manipulation of the argument myusername can lead to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2024-13556
creationtimestamp| type| source ---|---|--- 2025-02-18 06:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligmcxtwc32o 2025-02-18 08:00:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4752 2025-02-18 08:48:32+00:00| seen|...
CVE-2024-13556 Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection
The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possible for unauthenticated attackers to...
CVE-2024-13556 Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection
The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possible for unauthenticated attackers to...
CVE-2020-13556
creationtimestamp| type| source ---|---|--- 2022-06-07 23:36:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2219...
Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday issued an advisory warning of multiple vulnerabilities in the OpENer EtherNet/IP stack that could expose industrial systems to denial-of-service DoS attacks, data leaks, and remote code execution. All OpENer commits and...
CVE-2020-13556
The CVE-2020-13556 entry concerns the OpENer EtherNet/IP stack. A vulnerability in OpENer 2.3 and the development commit 8c73bf3 arises from an out-of-bounds write in the Ethernet/IP server, specifically CreateCommonPacketFormatStructure, where the item_count from an ENIP packet drives a loop wri...
CVE-2019-13556
Advantech WebAccess (versions 8.4.1 and earlier) contains stack-based buffer overflow vulnerabilities in multiple components (e.g., giffconv.exe, cnvlgxtag.exe, bwrunrpt.exe) caused by improper validation of the length of user-supplied data. Exploitation can lead to remote code execution with Adm...
Advantech WebAccess
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Advantech Equipment : WebAccess Vulnerabilities : Code Injection, Command Injection, Stack-based Buffer Overflow, Improper Authorization 2. RISK EVALUATION Successful exploitation of these...
CVE-2018-13556
The CVE-2018-13556 issue affects COSMOTokenERC20, an Ethereum token, where the mintToken function contains an integer overflow. This vulnerability allows the contract owner to set any user’s balance to an arbitrary value, enabling potential unilateral balance manipulation. The available sources c...