CVE-2019-25501

Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the appid parameter. Attackers can send POST requests to deleteapplicationajax.php with crafted payloads to extract sensitive data, bypass...

CVE-2019-25501

creationtimestamp| type| source ---|---|--- 2026-03-04 17:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgaucwyvbu2n 2026-03-06 05:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgelybklex2w...

CVE-2026-25501

Free5GC SMF (Session Management Function) up to version 1.4.1 is vulnerable to a nil pointer dereference that causes the SMF process to panic when processing a malformed PFCP SessionReportRequest on the PFCP interface (UDP/8805). The issue can lead to SMF termination. There is no known upstream f...

20210816-test (>=1.0.0 <=1.0.2) potentially affected by unknown CVE via lodah (=0.0.1-security)

lodah NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodah and may be impacted: - 20210816-test =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25501...

CVE-2021-25501

An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 allows untrusted application to call some protected providers...

CVE-2024-25501

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...

CVE-2024-25501

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...

CVE-2024-25501

CVE-2024-25501 concerns WinMail (versions 7.1, 5.1, and earlier). The vulnerability allows a remote attacker to execute arbitrary code by sending a crafted script to the email parameter. The impact is described as high confidentiality, integrity, and availability risks (per CVSS 3.1 metrics: AV:N...

CVE-2021-25501

CVE-2021-25501 involves an improper access control flaw in SCloudBnRReceiver within the SecTelephonyProvider. The root cause allows an untrusted application to call some protected providers, with impact described as limited integrity impact and no confidentiality/availability impact per CVSS metr...