CVE-2018-25161

creationtimestamp| type| source ---|---|--- 2026-03-06 15:37:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgfnefb26h2n...

CVE-2018-25199

creationtimestamp| type| source ---|---|--- 2026-03-06 14:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfkabdsfk2z...

CVE-2018-25170

creationtimestamp| type| source ---|---|--- 2026-03-06 14:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfipnviud27...

CVE-2018-25176

creationtimestamp| type| source ---|---|--- 2026-03-06 14:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfih24pck27...

CVE-2018-25188

creationtimestamp| type| source ---|---|--- 2026-03-06 14:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfid75x6u24...

CVE-2018-25196

creationtimestamp| type| source ---|---|--- 2026-03-06 14:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfi4aqxzl2e...

CVE-2018-25182

creationtimestamp| type| source ---|---|--- 2026-03-06 14:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhz3hagy2e...

CVE-2018-25181

creationtimestamp| type| source ---|---|--- 2026-03-06 14:00:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhw3q5zk2u...

CVE-2018-25198

eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers can create a payload file containing 255 bytes of data that triggers a buffer overflow condition when processed by the application...

CVE-2018-25192

GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username...

CVE-2018-25189

Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dcalogin.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive database information including...

CVE-2018-25199

CVE-2018-25199 affects OOP CMS BLOG 1.0, with concrete SQL injection flaws in multiple entry points. An unauthenticated attacker can inject SQL via the parameters: search (search.php), pageid (page.php), and id (posts.php) to retrieve database information, including table names, schema names, and...

CVE-2018-25198

eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers can create a payload file containing 255 bytes of data that triggers a buffer overflow condition when processed by the application...

CVE-2018-25193 Mongoose Web Server 6.9 Denial of Service via Socket Connection

Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service by establishing multiple socket connections. Attackers can repeatedly create connections to the default port and send malformed data to exhaust server resources and cause service...

CVE-2018-25191 Facturation System 1.0 SQL Injection via editar_producto.php

Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'modid' parameter. Attackers can send POST requests to the editarproducto.php endpoint with crafted SQL payloads in the modid...

CVE-2018-25190

Easyndexer 1.0 is affected by a CSRF in createuser.php that enables unauthenticated attackers to create administrative accounts by submitting forged POSTs with username, password, name, surname, and privileges=1. CVSS v3.1: 5.3 (NETWORK, LOW CA/PR, NONE UI) with I/L; CVSS v4.0: 6.9 (NETWORK, LOW ...

CVE-2018-25180

Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter in outmail and inmail modules. Attackers can also download the SQLite database file directly from the application...

CVE-2018-25178 Easyndexer 1.0 Arbitrary File Download via showtif.php

Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like...

CVE-2018-25176

CVE-2018-25176 affects Alive Parish 2.0.4. The advisory documents an unauthenticated SQL injection via the key parameter in the search endpoint and an arbitrary file upload through the person photo upload feature that can lead to remote code execution, with CVSS scores indicating HIGH severity (C...

CVE-2018-25176 Alive Parish 2.0.4 SQL Injection and Arbitrary File Upload

Alive Parish 2.0.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the key parameter in the search endpoint. Attackers can also upload arbitrary files via the person photo upload functionality to th...