o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

cve-2012-3137

This repository does not have a README...

CVE-2012-3137

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:16+00:00| seen| https://t.me/hackingAttack/77426 2026-09-02 01:01:33+00:00| seen| https://t.me/hackingAttack/77426 2026-09-05 04:00:03+00:00| published-proof-of-concept| https://t.me/hackingAttack/77426 2026-09-06 00:00:58+00:00|...

CVE-2026-3137

A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file foodordering.exe. Such manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been disclosed public...

CVE-2026-3137

creationtimestamp| type| source ---|---|--- 2026-02-25 01:12:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnitlhoaq2e...

CVE-2026-3137

CodeAstro Food Ordering System 1.0 is affected by a stack-based buffer overflow in the file food_ordering.exe. The vulnerability is exploitable locally and has publicly disclosed exploit information. The available sources consistently describe the impact as high (confidentiality, integrity, and a...

CVE-2026-3137 CodeAstro Food Ordering System food_ordering.exe stack-based overflow

A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file foodordering.exe. Such manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been disclosed public...

MiracleLinux 7 : bind-9.9.4-38.3.0.1.el7.AXS7 (AXSA:2017-1629:03)

"The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1629:03 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves...

EUVD-2018-17504

Malware in sbrugna...

CVE-2022-3137

The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user such as subscriber creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file...

CVE-2025-3137

creationtimestamp| type| source ---|---|--- 2025-04-03 06:52:17+00:00| seen| https://t.me/cvedetector/21936 2025-04-03 07:31:02+00:00| published-proof-of-concept| Telegram/EmS9bgYgLpx5pRbXrtQctY-Iz8lbm4p2ZetMSDDYp7zCam8...

CVE-2025-3137

A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. Th...

CVE-2025-3137

A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. Th...

CVE-2025-3137 PHPGurukul Online Security Guards Hiring System changeimage.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. Th...

Linux Distros Unpatched Vulnerability : CVE-2016-3137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/usb/serial/cypressm8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and...

Linux Distros Unpatched Vulnerability : CVE-2017-3137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in...

CVE-2024-3137

Improper Privilege Management in uvdesk/community-skeleton...

CVE-2024-3137 Improper Privilege Management in uvdesk/community-skeleton

Improper Privilege Management in uvdesk/community-skeleton...

CVE-2024-3137 Improper Privilege Management in uvdesk/community-skeleton

Improper Privilege Management in uvdesk/community-skeleton...

CVE-2024-3137

CVE-2024-3137 affects uvdesk/community-skeleton. The issue is described as improper privilege management arising from inadequate access controls. According to the entry, the vulnerability has a CVSSv3 base score of 7.1 (HIGH): network attack vector, low attack complexity, privileges required: LOW...