CVE-2018-25170

creationtimestamp| type| source ---|---|--- 2026-03-06 14:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfipnviud27...

CVE-2018-25173

creationtimestamp| type| source ---|---|--- 2026-03-06 14:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfil6jjyv2o...

CVE-2018-25176

creationtimestamp| type| source ---|---|--- 2026-03-06 14:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfih24pck27...

CVE-2018-25188

creationtimestamp| type| source ---|---|--- 2026-03-06 14:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfid75x6u24...

CVE-2018-25175

creationtimestamp| type| source ---|---|--- 2026-03-06 14:05:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfi7mely52n...

CVE-2018-25196

creationtimestamp| type| source ---|---|--- 2026-03-06 14:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfi4aqxzl2e...

CVE-2018-25182

creationtimestamp| type| source ---|---|--- 2026-03-06 14:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhz3hagy2e...

CVE-2018-25181

creationtimestamp| type| source ---|---|--- 2026-03-06 14:00:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhw3q5zk2u...

CVE-2018-25193

creationtimestamp| type| source ---|---|--- 2026-03-06 13:59:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhuc7awt2e 2026-04-23 12:45:22+00:00| seen| https://infosec.exchange/users/certvde/statuses/116454085232361431 2026-04-23 12:49:00+00:00| seen|...

CVE-2018-25189

creationtimestamp| type| source ---|---|--- 2026-03-06 13:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhlde5ii2e...

CVE-2018-25198

eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers can create a payload file containing 255 bytes of data that triggers a buffer overflow condition when processed by the application...

CVE-2018-25192

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25189

Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dcalogin.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive database information including...

CVE-2018-25199

CVE-2018-25199 affects OOP CMS BLOG 1.0, with concrete SQL injection flaws in multiple entry points. An unauthenticated attacker can inject SQL via the parameters: search (search.php), pageid (page.php), and id (posts.php) to retrieve database information, including table names, schema names, and...

CVE-2018-25198

eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers can create a payload file containing 255 bytes of data that triggers a buffer overflow condition when processed by the application...

CVE-2018-25193 Mongoose Web Server 6.9 Denial of Service via Socket Connection

Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service by establishing multiple socket connections. Attackers can repeatedly create connections to the default port and send malformed data to exhaust server resources and cause service...

CVE-2018-25191 Facturation System 1.0 SQL Injection via editar_producto.php

Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'modid' parameter. Attackers can send POST requests to the editarproducto.php endpoint with crafted SQL payloads in the modid...

CVE-2018-25189

Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to submit crafted SQL payloads via POST to extract sensitive DB information (usernames, database names, version details). CVSS vectors: CVSS3.1 (AV:N/AC...

CVE-2018-25190

Easyndexer 1.0 is affected by a CSRF in createuser.php that enables unauthenticated attackers to create administrative accounts by submitting forged POSTs with username, password, name, surname, and privileges=1. CVSS v3.1: 5.3 (NETWORK, LOW CA/PR, NONE UI) with I/L; CVSS v4.0: 6.9 (NETWORK, LOW ...

CVE-2018-25180

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...