119 matches found
ECHO-CA58-2059-36E1
Bulletin has no description...
CVE-2026-2059
A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...
CVE-2026-2059 SourceCodester Medical Center Portal Management System emp_edit1.php sql injection
A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...
EUVD-2026-2059
InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a...
CVE-2019-2059
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118386824...
CVE-2021-2059
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Web interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...
CVE-2009-2059
Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a 1 4xx or 2 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" atta...
CVE-2025-2059
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/booking-details.php. The manipulation of the argument ambulanceregnum leads to sql injection. The attack may be launche...
CVE-2025-2059
creationtimestamp| type| source ---|---|--- 2025-03-07 02:35:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6784 2025-03-07 04:01:04+00:00| seen| Telegram/rDwGYmYlfffaArRRWY262eYU245nTmzaz50xTQLFqYc5s 2025-03-07 04:03:53+00:00| seen| https://t.me/cvedetector/19771...
CVE-2025-2059 PHPGurukul Emergency Ambulance Hiring Portal booking-details.php sql injection
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/booking-details.php. The manipulation of the argument ambulanceregnum leads to sql injection. The attack may be launche...
CVE-2025-2059
CVE-2025-2059 affects the PHPGurukul Emergency Ambulance Hiring Portal 1.0. The vulnerability is a SQL injection in the ambulanceregnum parameter of the file /admin/booking-details.php. The issue is described as severe/critical and is exploitable remotely with no user interaction required. Public...
Linux Distros Unpatched Vulnerability : CVE-2015-2059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stringpreputf8toucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other...
CVE-2025-20640
In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issu...
CVE-2025-20640
CVE-2025-20640 affects MediaTek chipsets’ DA module, where a missing bounds check enables an out-of-bounds read. This could cause local information disclosure when an attacker has physical device access; exploitation requires user interaction but no privileges beyond being present. Impact is desc...
SUSE SLED15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2024:2059-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2059-1 advisory. - CVE-2024-4741: Fixed a use-after-free with SSLfreebuffers. bsc1225551 Tenable has extracted the precedi...
RHEL 5 : libidn (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libidn2: Integer overflow in punydecode.c/decodedigit CVE-2017-14062 - The stringpreputf8toucs4 function ...
CVE-2024-2059
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2024-2059
creationtimestamp| type| source ---|---|--- 2024-03-01 11:41:23+00:00| seen| https://t.me/ctinow/197516 2024-03-01 13:21:58+00:00| seen| https://t.me/ctinow/197593 2024-03-01 13:26:33+00:00| seen| https://t.me/ctinow/197597...
CVE-2024-2059
CVE-2024-2059 pertains to SourceCodester Petrol Pump Management Software 1.0, where an unrestricted file upload is possible via /admin/app/service_crud.php when handling the photo parameter. The root cause is manipulation of the photo argument that enables remote, unauthenticated uploads (as desc...