CVE-2019-25481 iScripts ReserveLogic Lastest SQL Injection via search endpoint

iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jqSearchDestination parameter. Attackers can send POST requests to the search endpoint with crafted SQL payloads to extract sensitiv...

CVE-2019-25516

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25516 2026-03-17 23:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhc5hkogjv2i...

CVE-2019-25515

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25515 2026-03-18 06:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcuwkfqg22e...

CVE-2019-25511

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25511 2026-03-19 10:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhfqlaspbi2q...

CVE-2019-25513

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25513 2026-03-18 01:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhce65immb2i...

CVE-2019-25514

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25514 2026-03-18 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcfbzie772u...

CVE-2019-25512

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25512 2026-03-18 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcd2etkfu23...

CVE-2019-25510

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25510 2026-03-18 01:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcbwqjesh2e...

CVE-2019-25509

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25509...

CVE-2019-25508

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25508 2026-03-18 02:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhchjg7k4n22...

CVE-2019-25488

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25488 2026-03-18 02:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcgfnrmov2m...

EUVD-2019-19764

Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit POST requests with crafted SQL payloads in the userid field to bypass authentication and extract...

CVE-2019-25485

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

CVE-2019-25477

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration...

CVE-2019-25476

Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the User Name and Registration Code field to...

CVE-2019-25465

Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...

CVE-2019-25477

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration...

CVE-2019-25474 Easy MP3 Downloader 4.7.8.8 Denial of Service Buffer Overflow

Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long unlock code. Attackers can generate a file containing 6000 'A' characters and paste the contents into the Unlock Code field during application...

CVE-2019-25474

Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long unlock code. Attackers can generate a file containing 6000 'A' characters and paste the contents into the Unlock Code field during application...

CVE-2019-25467 Verypdf docPrint Pro 8.0 Local SEH Buffer Overflow

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...