32 matches found
CVE-2025-9037
creationtimestamp| type| source ---|---|--- 2025-08-20 16:55:07+00:00| seen| https://bsky.app/profile/undercodenews.bsky.social/post/3lwtvev4xtr25 2025-08-21 11:49:22+00:00| seen| https://vulnerability.circl.lu/bundle/6b6e4418-513f-4750-b0bf-8e6f3ebf62dc 2025-08-21 11:50:30+00:00| seen|...
CVE-2024-9037
creationtimestamp| type| source ---|---|--- 2024-09-20 18:55:00+00:00| seen| https://t.me/cvedetector/6112...
CVE-2024-9037
CVE-2024-9037 affects Codezips Internal Marks Calculation 1.0. The vulnerability is an SQL injection in an unknown function of the file index.php triggered by manipulating the tid parameter, allowing remote execution of queries. Multiple sources (NVD, Red Hat, CVE list, and others) confirm a crit...
CVE-2024-9037 Codezips Internal Marks Calculation index.php sql injection
A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
SUSE CVE-2019-9037
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...
CVE-2019-9037
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...
CVE-2019-9037
The CVE-2019-9037 entry concerns the MAT file I/O library matio, specifically libmatio.a in version 1.5.13. The vulnerability is a buffer over-read in Mat_VarPrint() located in mat.c. Publicly documented details across multiple sources (NVD, CNVD, OSV, OSV Ubuntu, SUSE, Nessus notes) identify the...
CVE-2019-9037
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...
CVE-2019-9037
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...
Monstra CMS 3.0.4 Remote Code Execution
Exploit Title: Monstra CMS 3.0.4 Upload Plugin Remote code execution CVE-2018-9037 Date: 2018-05-14 Exploit Author: Jameel Nabbo Vendor Homepage: https://github.com/monstra-cms/monstra Software Link: https://github.com/monstra-cms/monstra Version: 3.0.4 Tested on: MAC OSX CVE :CVE-2018-9037 Monst...
Monstra CMS 3.0.4 - Remote Code Execution
Monstra CMS 3.0.4 - Remote Code Execution. CVE-2018-9037. Webapps exploit for PHP platform Exploit Title: Monstra CMS 3.0.4 Upload Plugin Remote code execution CVE-2018-9037 Date: 2018-05-14 Exploit Author: Jameel Nabbo Vendor Homepage: https://github.com/monstra-cms/monstra Software Link:...
Monstra CMS 3.0.4 - Remote Code Execution Vulnerability
Exploit for php platform in category web applications Exploit Title: Monstra CMS 3.0.4 Upload Plugin Remote code execution CVE-2018-9037 Exploit Author: Jameel Nabbo Vendor Homepage: https://github.com/monstra-cms/monstra Software Link: https://github.com/monstra-cms/monstra Version: 3.0.4 Tested...
CVE-2018-9037
Monstra CMS 3.0.4 is vulnerable to remote code execution via an upload_file request for a .zip file, which is automatically extracted and may deploy .php files. The underlying flaw allows arbitrary PHP execution when a zip containing PHP payload is uploaded, enabling remote code execution under s...
CVE-2017-9037
Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 S44, 2 S5, 3 Sactionfail, 4 Sptnupdate, 5 T113, 6 T114, 7 T115, 8 T117117, 9 T118, 10 Tactionfail, 11 Tptnupdate, 12...
CVE-2017-9037
CVE-2017-9037 affects Trend Micro ServerProtect for Linux 3.0 prior to CP 1531. The advisory/related reports document cross-site scripting vulnerabilities in notification.cgi and related CGI scripts, enabling an attacker to inject arbitrary script/HTML via parameters such as S44, S5, S_action_fai...
CVE-2017-9037
Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 S44, 2 S5, 3 Sactionfail, 4 Sptnupdate, 5 T113, 6 T114, 7 T115, 8 T117117, 9 T118, 10 Tactionfail, 11 Tptnupdate, 12...
Tarantool xrow_header_decode Out of Bounds Read (CVE-2016-9037)
An Out of Bounds read vulnerability has been reported in the xrowheaderdecode function of Tarantool. This vulnerability is due to incorrect handling of objects in memory when trying to determine the type of a key. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
CVE-2016-9037
The supplied documents confirm CVE-2016-9037 affects Tarantool 1.7.2.0-g8e92715, via an exploitable out-of-bounds read in the xrow_header_decode function. A crafted packet can access outside the bounds of a global array used to determine a key’s value type, leading to a denial of service on the s...
Fedora Update for tarantool FEDORA-2016-2d0c8ba781
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...