CVE-2019-25507

creationtimestamp| type| source ---|---|--- 2026-03-04 17:48:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgatrgjdsg2u...

CVE-2019-25506 FreeSMS 2.1.2 Authentication Bypass via SQL Injection

FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login endpoint. Attackers can exploit the vulnerable password parameter in requests to...

CVE-2019-25505 Tradebox 5.4 SQL Injection via symbol Parameter

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...

CVE-2019-25505 Tradebox 5.4 SQL Injection via symbol Parameter

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthlydeposit endpoint with malicious symbol values using boolean-based blind,...

CVE-2019-25503 PHPads 2.0 SQL Injection via click.php3 bannerID

PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...

CVE-2019-25499 Simple Job Script SQL Injection via get_job_applications_ajax.php

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jobid parameter. Attackers can send POST requests to getjobapplicationsajax.php with malicious jobid values to bypass authentication,...

runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects

A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...

CVE-2019-1020018

creationtimestamp| type| source ---|---|--- 2026-03-02 13:40:32+00:00| seen| https://gist.github.com/alon710/2be2eef3d2f72ee7a6659927b87a04d3...

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CVE-2026-21509 Office Kill-Bit Manager PowerShell script to...

CVE-2019-25452

creationtimestamp| type| source ---|---|--- 2026-03-01 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfz36jqkfg2q...

CVE-2019-25494

creationtimestamp| type| source ---|---|--- 2026-02-27 21:32:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfunxknwd42o...

CVE-2019-25492

creationtimestamp| type| source ---|---|--- 2026-02-27 21:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfunomajk52o 2026-03-06 23:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggidg6nni2m...

CVE-2019-25460

creationtimestamp| type| source ---|---|--- 2026-02-27 21:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfunansqic2x...

CVE-2019-25496

creationtimestamp| type| source ---|---|--- 2026-02-27 21:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfun5y7zsw2u 2026-03-04 03:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg7da366ut2a...

CVE-2019-25491

creationtimestamp| type| source ---|---|--- 2026-02-27 21:08:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfumlw6l6w2y 2026-03-06 23:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggh7o62uf23...

CVE-2019-25497

creationtimestamp| type| source ---|---|--- 2026-02-27 21:05:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfumgzrzgl2n 2026-03-04 03:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg7edtnm3t2a...

CVE-2019-25490

creationtimestamp| type| source ---|---|--- 2026-02-27 21:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfumckekvb2k 2026-03-07 03:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggvql34wx2e...

CVE-2019-25489

creationtimestamp| type| source ---|---|--- 2026-02-27 20:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfum2kzhg42e 2026-03-07 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggq5wpi542h...

CVE-2019-25493

creationtimestamp| type| source ---|---|--- 2026-02-27 20:54:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfultmm3n42v 2026-03-07 00:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mggjheobaz2m...

CVE-2019-25489

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hostingid parameter. Attackers can send GET requests to the rooms/ajaxrefreshsubtotal endpoint with malicious hostingid values to extract...