Lucene search
K

10 matches found

Cvelist
Cvelist
added 2025/11/23 4:2 p.m.8 views

CVE-2025-13556 Campcodes Online Polling System checklogin.php sql injection

A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing a manipulation of the argument myusername can lead to sql injection. The attack can be launched remotely. The exploit has been...

7.5CVSS0.00028EPSS
Exploits1References5
Circl
Circl
added 2025/02/18 6:15 a.m.4 views

CVE-2024-13556

creationtimestamp| type| source ---|---|--- 2025-02-18 06:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligmcxtwc32o 2025-02-18 08:00:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4752 2025-02-18 08:48:32+00:00| seen|...

9.8CVSS8.7AI score0.00804EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/02/18 5:22 a.m.6 views

CVE-2024-13556 Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possible for unauthenticated attackers to...

8.1CVSS7.6AI score0.00804EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/18 5:22 a.m.10 views

CVE-2024-13556 Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input from an file export. This makes it possible for unauthenticated attackers to...

8.1CVSS0.00804EPSS
Exploits0References2
Circl
Circl
added 2022/06/07 11:36 p.m.2 views

CVE-2020-13556

creationtimestamp| type| source ---|---|--- 2022-06-07 23:36:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2219...

9.8CVSS9AI score0.02647EPSS
Exploits1References1
The Hacker News
The Hacker News
added 2021/04/16 8:38 a.m.76 views

Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday issued an advisory warning of multiple vulnerabilities in the OpENer EtherNet/IP stack that could expose industrial systems to denial-of-service DoS attacks, data leaks, and remote code execution. All OpENer commits and...

9.8CVSS2AI score0.02647EPSS
Exploits2
CVE
CVE
added 2020/12/11 3:13 a.m.69 views

CVE-2020-13556

The CVE-2020-13556 entry concerns the OpENer EtherNet/IP stack. A vulnerability in OpENer 2.3 and the development commit 8c73bf3 arises from an out-of-bounds write in the Ethernet/IP server, specifically CreateCommonPacketFormatStructure, where the item_count from an ENIP packet drives a loop wri...

9.8CVSS9.7AI score0.02647EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/09/18 9:5 p.m.159 views

CVE-2019-13556

Advantech WebAccess (versions 8.4.1 and earlier) contains stack-based buffer overflow vulnerabilities in multiple components (e.g., giffconv.exe, cnvlgxtag.exe, bwrunrpt.exe) caused by improper validation of the length of user-supplied data. Exploitation can lead to remote code execution with Adm...

8.8CVSS9.3AI score0.01112EPSS
Exploits0References1Affected Software1
ICS
ICS
added 2019/09/17 12:0 a.m.190 views

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Advantech Equipment : WebAccess Vulnerabilities : Code Injection, Command Injection, Stack-based Buffer Overflow, Improper Authorization 2. RISK EVALUATION Successful exploitation of these...

9.8CVSS10AI score0.01498EPSS
Exploits0References5
CVE
CVE
added 2018/07/09 6:0 a.m.47 views

CVE-2018-13556

The CVE-2018-13556 issue affects COSMOTokenERC20, an Ethereum token, where the mintToken function contains an integer overflow. This vulnerability allows the contract owner to set any user’s balance to an arbitrary value, enabling potential unilateral balance manipulation. The available sources c...

7.5CVSS7.7AI score0.00237EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder