78517 matches found
Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞
The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock developed by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilitie...
Microsoft Windows Ancillary Function Driver for WinSock 访问控制错误漏洞
The Microsoft Windows Ancillary Function Driver for WinSock is a accessibility driver developed by Microsoft for Winsock. There is an access control vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. Microsoft Windows has a buffer error vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11 Version 26H1 fo...
Microsoft Windows Kerberos 竞争条件问题漏洞
Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, its design goal is to provide robust authentication services for client/server applications through a key system. There are vulnerabilities related to...
USN-8080-1: YARA vulnerabilities
Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issues only affected Ubuntu 16.04 LTS...
NewStart CGSL MAIN 6.06 (SP) : binutils Multiple Vulnerabilities (NS-SA-2026-0027)
The remote NewStart CGSL host, running version MAIN 6.06 SP, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in...
NewStart CGSL MAIN 6.06 (SP) : gcc Vulnerability (NS-SA-2026-0008)
The remote NewStart CGSL host, running version MAIN 6.06 SP, has gcc packages installed that are affected by a vulnerability: - The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the...
CVE-2019-25502
Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the jobtypevalue parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim...
CVE-2019-25506
FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password parameter in requests to...
CVE-2019-25501
Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the appid parameter. Attackers can send POST requests to deleteapplicationajax.php with crafted payloads to extract sensitive data, bypass...
CVE-2019-25434
creationtimestamp| type| source ---|---|--- 2026-03-05 02:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgbpa5euxi2h...
CVE-2019-25498
creationtimestamp| type| source ---|---|--- 2026-03-04 18:23:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgavoodeqc2d 2026-03-06 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggduevsn72w...
CVE-2019-25503
PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...
CVE-2019-25502
Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the jobtypevalue parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim...
CVE-2019-25500
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter. Attackers can send POST requests to the register-recruiters endpoint with time-based SQL injection payloads to...
CVE-2019-25500
creationtimestamp| type| source ---|---|--- 2026-03-04 18:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgauid3xpx2e 2026-03-06 23:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggg42r6rw2e...
CVE-2019-25501
creationtimestamp| type| source ---|---|--- 2026-03-04 17:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgaucwyvbu2n 2026-03-06 05:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgelybklex2w...
CVE-2019-25506
creationtimestamp| type| source ---|---|--- 2026-03-04 17:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgau62na2x24 2026-03-30 13:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mibprbwrcm2d...
CVE-2019-25499
creationtimestamp| type| source ---|---|--- 2026-03-04 17:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgatzlbp7o2v 2026-03-06 22:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggey4uwcw2e...