CVE-2019-25699

Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search...

CVE-2019-25695

R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payload with a 292-byte offset and JMP ESP instruction to execute commands like calc.exe when the...

CVE-2019-25713 MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter

MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Chargegrouptotal parameter. Attackers can submit crafted POST requests to the /charge/admin endpoint with error-based, time-based blind...

CVE-2019-25709 CF Image Hosting Script 1.6.5 Unauthorized Database Access

CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plaintext from the deserialized database and use them to delete all pictures via t...

CVE-2019-25703

ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with malicious 'bid' values containing SQL...

CVE-2019-25701

Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and...

CVE-2019-25693

CVE-2019-25693 – ResourceSpace 8.6 SQL injection : An authenticated attacker can inject malicious SQL via the keywords parameter in collection_edit.php (also noted as collection edit.php in some sources), enabling execution of arbitrary queries and extraction of sensitive data such as schema info...

CVE-2019-25691

CVE-2019-25691 affects Faleemi Desktop Software 1.8. The vulnerability is a local buffer overflow in the System Setup dialog that enables DEP bypass through structured exception handling. An attacker can inject a crafted payload into the Save Path for Snapshot and Record file field to trigger a b...

CVE-2019-25711

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25711 2026-04-12 14:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmaqnjja23...

CVE-2019-25712

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25712 2026-04-12 14:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclothsug2m...

CVE-2019-25713

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25713 2026-04-12 15:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmjpdcwy2a 2026-04-17 16:07:08+00:00| seen|...

CVE-2019-25710

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25710 2026-04-12 15:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmsntnnf2o 2026-04-17 15:07:08+00:00| seen|...

CVE-2019-25703

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25703 2026-04-12 14:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjts3lda2r...

CVE-2019-25706

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25706 2026-04-12 14:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck6lqblp2m...

CVE-2019-25708

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25708 2026-04-12 14:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclfuwc5p2g...

CVE-2019-25705

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25705 2026-04-12 14:20:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckcqao5n23 2026-06-07 03:07:07+00:00| seen|...

CVE-2019-25707

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25707 2026-04-12 14:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclxs2ktc2g...

CVE-2019-25709

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25709 2026-04-12 14:35:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcl676fhl2a 2026-04-23 21:07:07+00:00| seen|...

CVE-2019-25552

creationtimestamp| type| source ---|---|--- 2026-04-10 02:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj4afk7dmy2w...

📄 NetBT e-Fatura 2024 Unquoted Service Path

NetBT e-Fatura 2024 suffers from an unquoted service path vulnerability. Exploit Title: NetBT e-Fatura - Privilege Escalation Author: Seccops Discovery Date: 2025-10-03 Vendor: https://net-bt.com.tr/e-fatura/ Tested Version: 2024 Tested on OS: Microsoft Windows Server 2019 DC Vulnerability Type:...