CVE-2018-25258

creationtimestamp| type| source ---|---|--- 2026-04-12 14:16:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck2qo2dc23 2026-04-12 15:32:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcodso6mx25...

CVE-2018-25257

creationtimestamp| type| source ---|---|--- 2026-04-12 14:14:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjx5sh2n2a 2026-04-12 15:31:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcobvyrmx2y...

CVE-2018-25258 RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass

RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can craft malicious input in the Language for menus and messages field to trigger a stack-based...

CVE-2018-25257

Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileForm. Attackers can submit crafted SQL statements in the profile edit endpoint to modify user...

CVE-2018-25248

creationtimestamp| type| source ---|---|--- 2026-04-11 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj6xkzjqmn2e...

Exploit for Injection in Thedaylightstudio Fuel_Cms

CVE-2018-16763 — Fuel CMS 1.4.1 Remote Code Execution PoC...

CVE-2018-16487

creationtimestamp| type| source ---|---|--- 2026-04-08 08:13:40+00:00| seen| https://gist.github.com/gnsehfvlr/37529bab9e5164db2b92082b17f124cf 2026-05-20 15:46:13+00:00| seen| https://gist.github.com/steig/ddd6193b319e8b70af8f2659034a7922...

CVE-2018-6605

creationtimestamp| type| source ---|---|--- 2026-04-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-04-07 2026-04-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-04-12 2026-04-15 00:00:00+00:00| exploited| The Shadowserver...

📄 Fuel CMS 1.4.1 Remote Command Execution

Fuel CMS version 1.4.1 unauthenticated remote command execution exploit that leverages an issue discovered back in 2018. !/usr/bin/python3 Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution RCE via filter parameter Google Dork: intitle:"Welcome to Fuel CMS" inurl:/fuel/ Date: 2025-04-05 Exploi...

CVE-2018-25246

creationtimestamp| type| source ---|---|--- 2026-04-04 21:26:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mip6fz26mo2o 2026-04-04 22:46:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipctl7alq2i...

CVE-2018-25246 Wikipedia 12.0 Denial of Service via Search

Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functionality. Attackers can paste a large buffer of repeated characters into the search bar to trigger an application crash...

CVE-2018-25251

creationtimestamp| type| source ---|---|--- 2026-04-04 15:35:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miokqunz2y24...

CVE-2018-25255

creationtimestamp| type| source ---|---|--- 2026-04-04 15:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mioju6ndxs2n...

CVE-2018-25245

creationtimestamp| type| source ---|---|--- 2026-04-04 15:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miojl55m7n2o...

CVE-2018-25241

creationtimestamp| type| source ---|---|--- 2026-04-04 14:59:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mioiqbgzee2i...

CVE-2018-25250

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...

CVE-2018-25254

NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handlers to overwrite SEH pointers and...

CVE-2018-25248

MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field. Attackers can submit a new download with HTML/JavaScript code in the title parameter, which executes when administrators...

CVE-2018-25255 10-Strike LANState 8.8 Local Buffer Overflow SEH

10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that...

CVE-2018-25254

NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handlers to overwrite SEH pointers and...