78517 matches found
CVE-2019-25497
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...
CVE-2019-25495
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviewsid parameter. Attackers can send GET requests to productreviewswrite.php with malicious reviewsid values using boolean-based SQL...
CVE-2019-25494
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields. Attackers can submit SQL operators like '=' 'or' in both credentials to manipulate the...
CVE-2019-25461
creationtimestamp| type| source ---|---|--- 2026-02-27 03:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfsrza64vp2m...
CVE-2019-25457
creationtimestamp| type| source ---|---|--- 2026-02-27 01:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfslco2jxd22...
CVE-2019-25442
creationtimestamp| type| source ---|---|--- 2026-02-27 00:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfsfpyu2zu2r...
CVE-2019-25458
creationtimestamp| type| source ---|---|--- 2026-02-26 23:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfsdibxcxg23...
CVE-2019-25456
creationtimestamp| type| source ---|---|--- 2026-02-26 23:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfscepq4xa2m...
CVE-2019-25459
creationtimestamp| type| source ---|---|--- 2026-02-26 21:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfs4rqn2g622...
CVE-2019-25444
creationtimestamp| type| source ---|---|--- 2026-02-26 08:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfqq3erkap2m...
CVE-2019-25435
creationtimestamp| type| source ---|---|--- 2026-02-26 04:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfqdrtqnrp2q...
CVE-2019-25438
creationtimestamp| type| source ---|---|--- 2026-02-26 04:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfqcoaxtdt2x...
CVE-2019-25450
creationtimestamp| type| source ---|---|--- 2026-02-26 03:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfqbkcajoc2i...
Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI (CVE-2019-17570, CVE-2025-64775)
Summary Multiple vulnerabilities were addressed in IBM Tivoli Netcool/OMNIbusGUI 8.1.0 Fix Pack 40. Vulnerability Details CVEID:CVE-2025-64775 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache...
runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...
CVE-2019-25454
creationtimestamp| type| source ---|---|--- 2026-02-25 02:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfnnq42oyi2l...
Exploit for Improper Privilege Management in Microsoft
Windows Privilege Escalation ========================== A col...
CVE-2019-25456
Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...
Linux Distros Unpatched Vulnerability : CVE-2019-25452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers t...