CVE-2018-25144

creationtimestamp| type| source ---|---|--- 2025-12-24 21:25:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar7ap6lwn2y...

CVE-2018-25143

creationtimestamp| type| source ---|---|--- 2025-12-24 21:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar72q4hxq2c 2025-12-24 22:46:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mardqgsv6k2t...

CVE-2018-25147

creationtimestamp| type| source ---|---|--- 2025-12-24 21:16:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6qhrwml2u...

CVE-2018-25148

creationtimestamp| type| source ---|---|--- 2025-12-24 21:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mar6hrwhbi2m 2025-12-24 21:48:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3marakbvwng27...

CVE-2018-25154

GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system...

CVE-2018-25153

No description is available for this CVE...

DEBIAN-CVE-2018-25154

GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system...

DEBIAN-CVE-2018-25153

Bulletin has no description...

CVE-2018-25143

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping' command in the NcFTP environment to escape the restricted shell and execute commands with root...

CVE-2018-25128

SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through unvalidated POST parameters. Attackers can bypass authentication, retrieve password hashes, and gain administrative access with full system privileges by...

CVE-2018-25134

creationtimestamp| type| source ---|---|--- 2025-12-24 19:39:13+00:00| seen| https://bsky.app/profile/potato.software/post/3maqzcdqipy26 2025-12-24 22:46:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mardqnph4522...

CVE-2018-25154

CVE-2018-25154 affects GNU Barcode 0.99. The vulnerability is a buffer overflow in the Code 93 encoding path that can trigger memory corruption during input file processing. The description in connected sources confirms boundary/overflow issues in the encoding routine that could potentially allow...

CVE-2018-25144 Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform...

CVE-2018-25140 FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated Websocket Device Manipulation

FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authorization controls. Attackers can directly modify device configurations, access system information, and potentially...

CVE-2018-25135 Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import

Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing...

CVE-2018-25133 Synaccess netBooter NP-0801DU 7.4 Cross-Site Request Forgery via Admin Interface

Synaccess netBooter NP-0801DU 7.4 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages with hidden form submissions to add admin users by tricking authenticated...

CVE-2018-25134 Synaccess netBooter NP-02x/NP-08x 6.8 Authentication Bypass via webNewAcct.cgi

Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounts. Attackers can exploit the missing control check by sending crafted POST requests to create administrative account...

CVE-2018-25129 SOCA Access Control System 180612 Information Disclosure via Multiple Endpoints

SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials. Attackers can retrieve authenticated and unauthenticated user password hashes and pins through unprotected endpoints like...

CVE-2018-25130 Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized acces...

CVE-2018-25127

CVE-2018-25127 affects SOCA Access Control System 180612. The issue is a cross-site request forgery in the admin interface caused by lack of proper request validation, allowing forged requests to create admin accounts when a user visits a malicious page. Affected component: admin interface/API en...