CVE-2019-25252

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft malicious web pages that automatically submit password change requests to the device when a logged-in...

CVE-2025-25252

creationtimestamp| type| source ---|---|--- 2025-11-03 08:54:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58082 2025-11-22 10:11:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60472...

Exploit for Insufficient Session Expiration in Fortinet Fortios

CVE-202...

CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

Fortinet Fortigate Insufficient Session Expiration in SSLVPN using SAML authentication (FG-IR-24-487)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-487 advisory. - An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2... CVE-2025-25252 Note that...

CVE-2021-25252

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

CVE-2025-2019

Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targ...

CVE-2022-25252

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticat...

CVE-2022-25252

PTC Axeda Agent and Axeda Desktop Server are affected by CVE-2022-25252 (and related issues) due to improper handling of exceptional conditions and other flaws across all versions. The NVD/CISA details indicate multiple weaknesses including hard-coded credentials, missing authentication, and path...

CVE-2022-25252 PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticat...

CVE-2022-25252 PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticat...

CVE-2021-25252

creationtimestamp| type| source ---|---|--- 2021-03-03 18:45:34+00:00| seen| https://t.me/cibsecurity/24393...

CVE-2021-25252

CVE-2021-25252 concerns Trend Micro’s Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) experiencing a memory exhaustion vulnerability that can cause denial-of-service or a system freeze when processing specially crafted files. Affected components: VSAPI and ATSE in Trend Micro produc...

CVE-2020-25252

CVE-2020-25252 affects Hyland OnBase (multiple versions up to 20.3.10.1000 and below). The issue is a CSRF-driven login vulnerability that uses default credentials (the wstinol password for the manager or hsi account), allowing an attacker to log in a user and then perform actions. Affected versi...

thepiratebeach.eu XSS vulnerability

Vulnerable URL: http://thepiratebeach.eu/search/derp"/0/99/0 Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 22:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25252 Google Pagerank| 0 VIP website status:|...

D-Link DSL 320B Password Extractor

This module exploits an authentication bypass vulnerability in D-Link DSL 320B 'D-Link DSL 320B Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in D-Link DSL 320B 'EDB', '25252' , 'OSVDB', '93013' , 'URL', 'http://www.s3cur1ty.de/m1adv2013-018' ...