19 matches found
CVE-2025-13567
creationtimestamp| type| source ---|---|--- 2025-11-23 23:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6dhfxteby2s...
CVE-2025-13567
The CVE-2025-13567 entry affects itsourcecode COVID Tracking System 1.0. The vulnerability is an SQL injection in the /admin/?page=establishment path, caused by manipulation of the ID parameter. It enables remote exploitation and, per sources, the exploit is public and may be used. Multiple conne...
CVE-2019-13567
The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon aka the hidden web server is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a...
CVE-2024-13567
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored...
CVE-2024-13567
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored...
CVE-2024-13567
creationtimestamp| type| source ---|---|--- 2025-04-01 05:31:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9839...
CVE-2024-13567 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored...
CVE-2024-13567
CVE-2024-13567 affects the Awesome Support – WordPress HelpDesk & Support Plugin for WordPress. All versions up to and including 6.3.1 expose sensitive information via the /wp-content/uploads/awesome-support directory, allowing unauthenticated attackers to harvest attachments from ticket data. Th...
WordPress Awesome Support plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability
Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin Awesome Support versions = 6.3.1...
Zoom Client for Meetings 4.1.27507.0627 < 4.4.52595.0425 Vulnerability (ZSB-19003)
The version of Zoom Client for Meetings installed on the remote host is between 4.1.27507.0627 and 4.4.52595.0425. It is, therefore, affected by a vulnerability as referenced in the ZSB-19003 advisory. - A vulnerability in the Zoom macOS client could allow an attacker to download malicious softwa...
CVE-2020-13567
creationtimestamp| type| source ---|---|--- 2022-04-24 18:34:38+00:00| seen| https://t.me/cibsecurity/41015...
CVE-2020-13567
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2020-13567
CVE-2020-13567 concerns the phpGACL 3.3.7 library, which contains multiple SQL injection vulnerabilities. The flaws arise from unsanitized input being concatenated into SQL queries across the code paths in phpGACL (notably in admin/edit_group.php and related group handling functions), enabling at...
CVE-2020-13567
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2020-13567
Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2019-13567
creationtimestamp| type| source ---|---|--- 2019-07-13 13:13:54+00:00| published-proof-of-concept| https://t.me/thehackernews/380...
CVE-2019-13567
CVE-2019-13567 affects the Zoom Client for macOS, prior to 4.4.53932.0709. The issue arises when the ZoomOpener daemon (a hidden local web server) is running but the Zoom Client is not installed or cannot be opened; an attacker can remotely execute code by using a maliciously crafted launch URL. ...
Zoom Client for Meetings 4.x < 4.4.53932.0709 Multiple Vulnerabilities (macOS)
The version of Zoom Client for Meetings installed on the remote macOS host is 4.x prior to 4.4.53932.0709. It is, therefore, affected by multiple vulnerabilities. - A denial of service vulnerability exists in Zoom due to an issue with the local webserver. An unauthenticated, remote attacker can...
CVE-2018-13567
The CVE-2018-13567 entry describes an integer overflow in the mintToken function of a smart-contract implementation for SDR, an Ethereum token. The underlying issue allows the contract owner to set an arbitrary user’s balance to any value, implying a balance manipulation vulnerability. The connec...