CVE-2026-74872

creationtimestamp| type| source ---|---|--- 2026-08-17 12:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo44i3ol2b 2026-08-17 18:10:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcce7z3bd2j 2026-08-20 00:03:28+00:00| seen|...

CVE-2026-19901

creationtimestamp| type| source ---|---|--- 2026-08-15 19:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5e7ud37627...

CVE-2026-73678

creationtimestamp| type| source ---|---|--- 2026-08-14 20:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt2x46bm6v2f 2026-08-14 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2x555g5d2b 2026-08-17 18:00:04+00:00| seen|...

CVE-2026-73669

creationtimestamp| type| source ---|---|--- 2026-08-13 20:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hi7gjwjvodaob...

CVE-2026-58241

creationtimestamp| type| source ---|---|--- 2026-08-13 08:47:58+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2019-25496

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the productsid parameter. Attackers can modify the productsid value in productinfo.php requests and append boolean-based SQL injection...

CVE-2019-25496

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the productsid parameter. Attackers can modify the productsid value in productinfo.php requests and append boolean-based SQL injection...

CVE-2019-25496 osCommerce 2.3.4.1 SQL Injection via products_id Parameter

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the productsid parameter. Attackers can modify the productsid value in productinfo.php requests and append boolean-based SQL injection...

CVE-2019-25496

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the productsid parameter. Attackers can modify the productsid value in productinfo.php requests and append boolean-based SQL injection...

PT-2026-22364

Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1 Description The software contains a SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through the products id parameter. Specifically, modifying t...

CVE-2025-24496

CVE-2025-24496 affects Tenda AC6 V5.0 V02.03.01.110. The information-disclosure flaw resides in /goform/getproductInfo; Talos notes an authentication bypass when requesting this URL, allowing a non-authenticated retrieval of module data via the generic getter, potentially exposing configuration d...

Tenda AC6 V5.0 /goform/getproductInfo information disclosure vulnerability

Talos Vulnerability Report TALOS-2025-2164 Tenda AC6 V5.0 /goform/getproductInfo information disclosure vulnerability August 20, 2025 CVE Number CVE-2025-24496 SUMMARY An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110...

Genexis Tilgin Home Gateway Cross-Site Scripting Vulnerability

Genexis Tilgin Home Gateway is a series of home gateways from Genexis, a South Korean company. A cross-site scripting vulnerability exists in the Genexis Tilgin Fiber Home Gateway HG1522 CSx000-01090112 version, which stems from the fact that manipulation of the parameter productinfo can lead to...

PT-2024-37561

Name of the Vulnerable Software and Affected Versions Genexis Tilgin Fiber Home Gateway HG1522 version CSx000-01 09 01 12 Description A vulnerability was found in the Genexis Tilgin Fiber Home Gateway, affecting an unknown functionality of the file /status/product info/. The manipulation of the...

AMD Data Breach: IntelBroker Claims Theft of Employee and Product Info

Advanced Micro Devices, Inc. AMD has apparently been breached by IntelBroker, a notorious hacker from the Breach Forums --- AMD has not yet confirmed the breach...

CVE-2024-3649

The Contact Form by WPForms – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to price manipulation in versions up to, and including, 1.8.7.2. This is due to a lack of controls on several product parameters. This makes it possible for unauthenticated attackers to...

CVE-2023-43703

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

PT-2023-28921

Name of the Vulnerable Software and Affected Versions Os Commerce affected versions not specified Description The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the product infoname parameter. This could lead to unauthorized execution of scrip...

Cross site scripting

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify product information...

Siemens SIMATIC SCALANCE Device Detection (SNMP)

SNMP based detection of Siemens SIMATIC SCALANCE devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...