CVE-2018-25343 Smartshop 1 Cross-Site Request Forgery via editprofile.php

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that...

Exploit for Path Traversal in Fortinet Fortiproxy

CVE-2018-13379 — Mass Exploit for Fortine...

RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers

Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers...

quagga: Fix of CVE-2018-5380

CVE-2018-5380: fix BGP NOTIFY debug-print msg array over-read...

CVE-2018-8740

creationtimestamp| type| source ---|---|--- 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-03...

SUSE CVE-2019-10171

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service...

CVE-2018-1000620

creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:13+00:00| seen| https://gist.github.com/steig/ddd6193b319e8b70af8f2659034a7922...

CVE-2018-7408

creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:13+00:00| seen| https://gist.github.com/steig/ddd6193b319e8b70af8f2659034a7922...

CVE-2018-25328

VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute...

CVE-2018-25330

creationtimestamp| type| source ---|---|--- 2026-05-17 14:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2msvtccr2i...

CVE-2018-25328

creationtimestamp| type| source ---|---|--- 2026-05-17 14:56:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2mmwodr52k...

CVE-2018-25327

creationtimestamp| type| source ---|---|--- 2026-05-17 14:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2mhklkqp2p...

CVE-2018-25329

creationtimestamp| type| source ---|---|--- 2026-05-17 14:45:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2m222nlt2h...

CVE-2018-25332

creationtimestamp| type| source ---|---|--- 2026-05-17 14:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lw72uhj2k 2026-05-27 22:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmul26bjea2u...

CVE-2018-25326

creationtimestamp| type| source ---|---|--- 2026-05-17 14:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lsmb3652o...

CVE-2018-25325

creationtimestamp| type| source ---|---|--- 2026-05-17 14:37:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lm36p7j2c...

CVE-2018-25331

creationtimestamp| type| source ---|---|--- 2026-05-17 14:36:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lj3hrou2o...

CVE-2018-25333

creationtimestamp| type| source ---|---|--- 2026-05-17 14:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2lgarnhh2r...

CVE-2018-25333

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

CVE-2018-25326

Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in the filename parameter. Attackers can send POST requests to gdrive-ajaxs.php with the ajaxstype parameter set to...