CVE-2018-25002

CVE-2018-25002 affects the Drupal KCFinder integration (uploader.php) through 2018-06-01, where input validation is mishandled. The issue originates from the KCFinder integration project and is associated with SA-CONTRIB-2018-024. NVD lists CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack vect...

CVE-2019-25002

creationtimestamp| type| source ---|---|--- 2020-12-31 12:37:44+00:00| seen| https://t.me/cibsecurity/21464...

CVE-2019-25002

The CVE-2019-25002 issue affects the sodiumoxide crate for Rust prior to version 0.2.5. The vulnerability stems from generichash::Digest::eq comparing the value to itself, producing degenerate security properties (reported across Red Hat, OSV, GHSA advisories, and NVD records). Practical impact i...

b2b (0.1.0), box_stream (>=0.1.0, <=0.2.1) +57 more potentially affected by CVE-2019-25002 via sodiumoxide (>=0.0.4, <=0.1.0)

sodiumoxide CARGO version =0.0.4, =0.1.0, =0.0.7, =0.1.0, =0.5.0, =0.0.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.9, =0.2.5 and more Source cves: CVE-2019-25002 Source advisory: OSV:RUSTSEC-2019-0026...

Oracle DB SQL Injection via DBMS_EXPORT_EXTENSION

This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the DBMSEXPORTEXTENSION.GETDOMAININDEXMETADATA package. Note: This module has been tested against 9i, 10gR1 and 10gR2. This module requires Metasploit: https://metasploit.com/download Current source:...