CVE-2018-25000 to CVE-2018-25999

328 CVEs with public proof-of-concept exploits.

• CVE-2018-250193 PoCsLearnDash < 2.5.4 - Unauthenticated Arbitrary File Upload
• CVE-2018-2503115 PoCsSwagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an…
• CVE-2018-250323 PoCszlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
• CVE-2018-250341 PoCThomson TCW710 wlanPrimaryNetwork Persistent cross site scripting
• CVE-2018-250431 PoCuTorrent PRNG improper authentication
• CVE-2018-250551 PoCFarCry Solr Pro Plugin Search solrProSearch.cfc cross site scripting
• CVE-2018-250802 PoCsMobileDetect Example session_example.php initLayoutType cross site scripting
• CVE-2018-250811 PoCBitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have…
• CVE-2018-250831 PoCThe pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name.
• CVE-2018-250951 PoCDuplicator < 1.3.0 - Unauthenticated RCE
• CVE-2018-251092 PoCsNintendo Animal Crossing Letter Trigram ac-exploit-gc memory corruption
• CVE-2018-251101 PoCRegular Expression Denial of Service (ReDoS) in markedjs/marked
• CVE-2018-251133 PoCsDicoogle PACS Web Server 2.5.0 Unauthenticated Path Traversal
• CVE-2018-251144 PoCsosCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution
• CVE-2018-251152 PoCsD-Link DIR-110/412/600/615/645/815 RCE via service.cgi
• CVE-2018-251161 PoCMyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting
• CVE-2018-251183 PoCsGeoVision Command Injection RCE via /PictureCatch.cgi
• CVE-2018-251203 PoCsD-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test
• CVE-2018-251241 PoCPacsOne Server 6.6.2 DICOM Web Viewer Directory Traversal LFI
• CVE-2018-251251 PoCNetis DL4322D RTK 2.1.1 FTP Service DoS
• CVE-2018-251262 PoCsTVT NVMS-9000 Hard-coded API Credentials & Command Injection
• CVE-2018-251271 PoCSOCA Access Control System 180612 Cross-Site Request Forgery via Admin Interface
• CVE-2018-251281 PoCSOCA Access Control System 180612 SQL Injection and Authentication Bypass
• CVE-2018-251291 PoCSOCA Access Control System 180612 Information Disclosure via Multiple Endpoints
• CVE-2018-251301 PoCBeward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database
• CVE-2018-251311 PoCLeica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Stored XSS via Config Upload
• CVE-2018-251321 PoCMyBB Trending Widget Plugin 1.2 - Cross-Site Scripting
• CVE-2018-251331 PoCSynaccess netBooter NP-0801DU 7.4 Cross-Site Request Forgery via Admin Interface
• CVE-2018-251341 PoCSynaccess netBooter NP-02x/NP-08x 6.8 Authentication Bypass via webNewAcct.cgi
• CVE-2018-251351 PoCAnviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import
• CVE-2018-251361 PoCFLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated RTSP Stream Disclosure
• CVE-2018-251371 PoCFLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated Config File Disclosure
• CVE-2018-251381 PoCFLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass
• CVE-2018-251391 PoCFLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure
• CVE-2018-251401 PoCFLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated Websocket Device Manipulation
• CVE-2018-251411 PoCFLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated RTSP Stream Disclosure
• CVE-2018-251421 PoCNovaRad NovaPACS Diagnostics Viewer 8.5 XML External Entity Injection
• CVE-2018-251431 PoCMicrohard Systems IPn4G 1.1.0 Backdoor Jailbreak via Microhard Sh Service
• CVE-2018-251441 PoCMicrohard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor
• CVE-2018-251451 PoCMicrohard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated Download
• CVE-2018-251461 PoCMicrohard Systems IPn4G 1.1.0 Service Control Denial of Service
• CVE-2018-251471 PoCMicrohard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass
• CVE-2018-251481 PoCMicrohard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface
• CVE-2018-251491 PoCMicrohard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface
• CVE-2018-251501 PoCEcessa ShieldLink SL175EHQ 10.7.4 Cross-Site Request Forgery via User Configuration
• CVE-2018-251511 PoCEcessa WANWorx WVR-30 < 10.7.4 Cross-Site Request Forgery via User Configuration
• CVE-2018-251521 PoCEcessa Edge EV150 10.7.4 Cross-Site Request Forgery via User Configuration
• CVE-2018-251541 PoCGNU Barcode 0.99 Buffer Overflow in Code 93 Encoding Mechanism
• CVE-2018-251551 PoCTeradek Slice 7.3.15 Cross-Site Request Forgery via Password Change
• CVE-2018-251561 PoCTeradek Cube 7.3.6 Cross-Site Request Forgery Password Change
• CVE-2018-251571 PoCPhraseanet 4.0.3 Stored XSS via Document Upload
• CVE-2018-251581 PoCChamilo LMS 1.11.8 Arbitrary File Upload via elfinder
• CVE-2018-251591 PoCEpross AVCON6 OGNL Remote Code Execution via login.action
• CVE-2018-251611 PoCWarranty Tracking System 11.06.3 SQL Injection via SearchCustomer.php
• CVE-2018-251621 PoC2-Plan Team 1.0.4 Arbitrary File Upload via managefile.php
• CVE-2018-251631 PoCBitZoom 1.0 SQL Injection via rollno Parameter
• CVE-2018-251641 PoCEverSync 0.5 Arbitrary File Download via files Directory
• CVE-2018-251651 PoCGalaxy Forces MMORPG 0.5.8 SQL Injection via ads.php
• CVE-2018-251661 PoCMeneame English Pligg 5.8 SQL Injection via search Parameter
• CVE-2018-251671 PoCNet-Billetterie 2.9 SQL Injection via login.inc.php
• CVE-2018-251681 PoCPrecurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin
• CVE-2018-251691 PoCAMPPS 2.7 Denial of Service via Malformed Socket Connection
• CVE-2018-251701 PoCDoceboLMS 1.2 SQL Injection via lesson.php
• CVE-2018-251711 PoCEdTv 2 SQL Injection via id Parameter
• CVE-2018-251721 PoCPedidos 1.0 SQL Injection via load_proveedores.php
• CVE-2018-251731 PoCRmedia SMS 1.0 SQL Injection via editgrp.php
• CVE-2018-251741 PoCABC ERP 0.6.4 Cross-Site Request Forgery via _configurar_perfil.php
• CVE-2018-251751 PoCAlienor Web Libre 2.0 SQL Injection via index.php
• CVE-2018-251761 PoCAlive Parish 2.0.4 SQL Injection and Arbitrary File Upload
• CVE-2018-251771 PoCData Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php
• CVE-2018-251781 PoCEasyndexer 1.0 Arbitrary File Download via showtif.php
• CVE-2018-251791 PoCGumbo CMS 0.99 SQL Injection via settings endpoint
• CVE-2018-251801 PoCMaitra 1.7.2 SQL Injection and Database File Download
• CVE-2018-251811 PoCMusicco 2.0.0 Arbitrary Directory Download via Path Traversal
• CVE-2018-251821 PoCSilurus Classifieds Script 2.0 SQL Injection via wcategory.php
• CVE-2018-251831 PoCShipping System CMS 1.0 SQL Injection via admin login
• CVE-2018-251841 PoCSurreal ToDo 0.6.1.2 Local File Inclusion via index.php
• CVE-2018-251851 PoCWecodex Restaurant CMS 1.0 SQL Injection via Login
• CVE-2018-251861 PoCTina4 Stack 1.0.3 Cross-Site Request Forgery via profile
• CVE-2018-251871 PoCTina4 Stack 1.0.3 SQL Injection and Database File Download
• CVE-2018-251881 PoCWebiness Inventory 2.3 SQL Injection via WsModelGrid.php
• CVE-2018-251891 PoCData Center Audit 2.6.2 SQL Injection via username Parameter
• CVE-2018-251901 PoCEasyndexer 1.0 Cross-Site Request Forgery via createuser.php
• CVE-2018-251911 PoCFacturation System 1.0 SQL Injection via editar_producto.php
• CVE-2018-251921 PoCGPS Tracking System 2.12 SQL Injection via username Parameter
• CVE-2018-251931 PoCMongoose Web Server 6.9 Denial of Service via Socket Connection
• CVE-2018-251941 PoCNominas 0.27 SQL Injection via username Parameter
• CVE-2018-251951 PoCWecodex Hotel CMS 1.0 SQL Injection via Admin Login
• CVE-2018-251961 PoCServerZilla 1.0 SQL Injection via email Parameter
• CVE-2018-251971 PoCPlayJoom 0.10.1 SQL Injection via catid Parameter
• CVE-2018-251981 PoCeToolz 3.4.8.0 Denial of Service via Buffer Overflow
• CVE-2018-251991 PoCOOP CMS BLOG 1.0 SQL Injection via search parameter
• CVE-2018-252001 PoCOOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php
• CVE-2018-252011 PoCSchool Management System CMS 1.0 Admin Login SQL Injection
• CVE-2018-252021 PoCSAT CFDI 3.3 SQL Injection via signIn endpoint
• CVE-2018-252031 PoCOnline Store System CMS 1.0 SQL Injection via clientaccess
• CVE-2018-252041 PoCLibrary CMS 1.0 SQL Injection via admin login
• CVE-2018-252051 PoCASP.NET jVideo Kit 1.0 SQL Injection via query Parameter
• CVE-2018-252061 PoCKomSeo Cart 1.3 SQL Injection via edit.php
• CVE-2018-252071 PoCOnline Quiz Maker 1.0 SQL Injection via catid Parameter
• CVE-2018-252081 PoCqdPM 9.1 SQL Injection via filter_by Parameters
• CVE-2018-252091 PoCOpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter
• CVE-2018-252101 PoCWebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter
• CVE-2018-252111 PoCAllok Video Splitter 3.1.1217 Buffer Overflow via License Name
• CVE-2018-252121 PoCBoxoft wav-wma Converter 1.0 Local Buffer Overflow SEH
• CVE-2018-252131 PoCNsauditor 3.0.28.0 Local SEH Buffer Overflow
• CVE-2018-252141 PoCMegaPing Local Buffer Overflow Denial of Service
• CVE-2018-252151 PoCExcel Password Recovery Professional 8.2.0.0 Local Buffer Overflow DoS
• CVE-2018-252161 PoCAnyBurn 4.3 Denial of Service Local Buffer Overflow
• CVE-2018-252171 PoCPDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution
• CVE-2018-252181 PoCPassFab RAR Password Recovery 9.3.2 SEH Buffer Overflow
• CVE-2018-252191 PoCPassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow
• CVE-2018-252201 PoCBochs 2.6-5 Buffer Overflow Remote Code Execution
• CVE-2018-252211 PoCEChat Server 3.1 Buffer Overflow via chat.ghp username Parameter
• CVE-2018-252221 PoCSC v7.16 Stack-Based Buffer Overflow Remote Code Execution
• CVE-2018-252231 PoCCrashmail 1.6 Stack-based Buffer Overflow Remote Code Execution
• CVE-2018-252241 PoCPMS 0.42 Stack-Based Buffer Overflow via Configuration File
• CVE-2018-252251 PoCSIPP 3.3 Stack-Based Buffer Overflow via Configuration File
• CVE-2018-252261 PoCFTPShell Server 6.83 Denial of Service via Account Name
• CVE-2018-252271 PoCValentina Studio 9.0.4 Denial of Service via Host Parameter
• CVE-2018-252281 PoCNetSetMan 4.7.1 Workgroup Buffer Overflow Denial of Service
• CVE-2018-252291 PoCBulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP
• CVE-2018-252301 PoCFree IP Switcher 3.1 Denial of Service via Computer Name
• CVE-2018-252311 PoCHeidiSQL 9.5.0.5196 Denial of Service via Preferences
• CVE-2018-252321 PoCSoftros LAN Messenger 9.2 Denial of Service via Log Files Location
• CVE-2018-252331 PoCWebDrive 18.00.5057 Denial of Service via Secure WebDAV
• CVE-2018-252341 PoCSmartFTP Client 9.0.2615.0 Denial of Service via Host Field
• CVE-2018-252351 PoCNetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS
• CVE-2018-252381 PoCVSCO 1.1.1.0 Denial of Service via Search
• CVE-2018-252391 PoCSmart VPN 1.1.3.0 Denial of Service via Search
• CVE-2018-252401 PoCWatchr 1.1.0.0 Denial of Service via Search
• CVE-2018-252411 PoCVPN Browser+ 1.1.0.0 Denial of Service
• CVE-2018-252421 PoCOne Search 1.1.0.0 Denial of Service
• CVE-2018-252431 PoCFastTube 1.0.1.0 Denial of Service via Search
• CVE-2018-252441 PoCEco Search 1.0.2.0 Denial of Service
• CVE-2018-252451 PoC7 Tik 1.0.1.0 Denial of Service via Search
• CVE-2018-252461 PoCWikipedia 12.0 Denial of Service via Search
• CVE-2018-252471 PoCMyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles
• CVE-2018-252481 PoCMyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.php
• CVE-2018-252491 PoCMyBB My Arcade Plugin 1.3 Persistent XSS via Comment
• CVE-2018-252501 PoCMyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS
• CVE-2018-252511 PoCSnes9K 0.0.9z Buffer Overflow SEH via Netplay Socket
• CVE-2018-252521 PoCFTP Voyager 16.2.0 Denial of Service via Malformed Site Profile
• CVE-2018-252531 PoCTermite 3.4 Denial of Service via Settings Buffer Overflow
• CVE-2018-252541 PoCNICO-FTP 3.0.1.19 Buffer Overflow SEH
• CVE-2018-252551 PoC10-Strike LANState 8.8 Local Buffer Overflow SEH
• CVE-2018-252561 PoCIP TOOLS 2.50 Local Buffer Overflow Denial of Service
• CVE-2018-252571 PoCAdianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
• CVE-2018-252581 PoCRGui 3.5.0 Local Buffer Overflow SEH DEP Bypass
• CVE-2018-252591 PoCTerminal Services Manager 3.1 Buffer Overflow SEH
• CVE-2018-252601 PoCMAGIX Music Editor 3.1 Buffer Overflow via SEH
• CVE-2018-252611 PoCIperius Backup 5.8.1 Local Buffer Overflow SEH
• CVE-2018-252621 PoCAngry IP Scanner for Linux 3.5.3 Denial of Service
• CVE-2018-252631 PoCFaleemi Desktop Software 1.8.2 Local Buffer Overflow SEH
• CVE-2018-252641 PoCTransMac 12.2 Denial of Service via License Key Field
• CVE-2018-252651 PoCLanSpy 2.0.1.159 Local Buffer Overflow
• CVE-2018-252661 PoCAngry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow
• CVE-2018-252671 PoCUltraISO 9.7.1.3519 Buffer Overflow via Output FileName
• CVE-2018-252681 PoCLanSpy 2.0.1.159 Local Buffer Overflow via Scan Field
• CVE-2018-252691 PoCICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection
• CVE-2018-252701 PoCThinkPHP 5.0.23 Remote Code Execution via invokefunction
• CVE-2018-252711 PoCTextpad 8.1.2 Denial of Service via Run Command
• CVE-2018-252721 PoCELBA5 5.8.0 Remote Code Execution via Database Access
• CVE-2018-252731 PoCCrossFont 7.5 Denial of Service via License Key Field
• CVE-2018-252741 PoCInfraRecorder 0.53 Denial of Service via txt File Import
• CVE-2018-252751 PoCFaleemi Plus 1.0.2 Denial of Service via Buffer Overflow
• CVE-2018-252761 PoCRoboImport 1.2.0.72 Denial of Service via Registration Fields
• CVE-2018-252771 PoCPixGPS 1.1.8 Buffer Overflow Denial of Service
• CVE-2018-252781 PoCPicaJet FX 2.6.5 Denial of Service via Registration Fields
• CVE-2018-252791 PoCjiNa OCR Image to Text 1.0 Denial of Service via PNG
• CVE-2018-252801 PoCInfiltrator Network Security Scanner 4.6 Denial of Service
• CVE-2018-252811 PoCiCash 7.6.5 Denial of Service via Connect to Server
• CVE-2018-252821 PoCNmap 7.70 Denial of Service via XML Entity Expansion
• CVE-2018-252831 PoCiSmartViewPro 1.5 Buffer Overflow via SavePath Parameter
• CVE-2018-252841 PoCHD Tune Pro 5.70 Denial of Service via Options Dialog
• CVE-2018-252851 PoCFathom 2.4 Denial of Service via Authorization Code Buffer Overflow
• CVE-2018-252861 PoCEasy PhotoResQ 1.0 Buffer Overflow Denial of Service
• CVE-2018-252871 PoCDrive Power Manager 1.10 Denial of Service via Name Field
• CVE-2018-252881 PoCStyleWriter 1.0 Denial of Service via Pattern Input
• CVE-2018-252891 PoCSoftdisk 3.0.3 Buffer Overflow Denial of Service
• CVE-2018-252901 PoCEasyboot 6.6.0 Buffer Overflow Denial of Service
• CVE-2018-252911 PoCProject64 2.3.2 Denial of Service via Plugin Directory
• CVE-2018-252921 PoCBome Restorator 1793 Denial of Service via Buffer Overflow
• CVE-2018-252931 PoCPrime95 29.4b7 Denial of Service via Proxy Password Field
• CVE-2018-252941 PoCCEWE Photoshow 6.3.4 Buffer Overflow Denial of Service
• CVE-2018-252951 PoCObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field
• CVE-2018-252961 PoCP10 Central Management Software 1.4.13 Denial of Service
• CVE-2018-252971 PoCWansview 1.0.2 Denial of Service via Buffer Overflow
• CVE-2018-252981 PoCMerge PACS 7.0 Cross-Site Request Forgery via merge-viewer
• CVE-2018-252991 PoCPrime95 29.4b8 Local Buffer Overflow via SEH
• CVE-2018-253001 PoCXATABoost CMS 1.0.0 SQL Injection via news.php
• CVE-2018-253011 PoCEasy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow
• CVE-2018-253021 PoCAllok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEH
• CVE-2018-253031 PoCAllok Video to DVD Burner 2.6.1217 Buffer Overflow SEH
• CVE-2018-253041 PoCFree Download Manager 2.0 Build 417 Local Buffer Overflow SEH
• CVE-2018-253051 PoClibrsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG
• CVE-2018-253061 PoCPDFunite 0.41.0 Buffer Overflow via Malformed PDF
• CVE-2018-253071 PoCSysGauge Pro 4.6.12 Local Buffer Overflow SEH
• CVE-2018-253081 PoCBuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion
• CVE-2018-253091 PoCMyBB Recent threads 17.0 Persistent Cross-Site Scripting
• CVE-2018-253101 PoCVideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution
• CVE-2018-253111 PoCVideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal
• CVE-2018-253121 PoCLifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution
• CVE-2018-253131 PoCSysGauge 4.5.18 Local Denial of Service via Proxy Configuration
• CVE-2018-253141 PoCAllok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow
• CVE-2018-253151 PoCAlloksoft Video joiner 4.6.1217 Buffer Overflow via License Name
• CVE-2018-253161 PoCTenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change
• CVE-2018-253171 PoCTenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change
• CVE-2018-253181 PoCTenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change
• CVE-2018-253191 PoCRedaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php
• CVE-2018-253201 PoCACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution
• CVE-2018-253211 PoCTP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)
• CVE-2018-253221 PoCAllok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflow
• CVE-2018-253231 PoCAllok AVI DivX MPEG to DVD Converter 2.6.1217 Buffer Overflow SEH
• CVE-2018-253241 PoCSimple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath
• CVE-2018-253251 PoCWoocommerce CSV Importer 3.3.6 Path Traversal File Deletion
• CVE-2018-253261 PoCGoogle Drive for WordPress 2.2 Path Traversal RCE via gdrive-ajaxs.php
• CVE-2018-253271 PoCJoomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery
• CVE-2018-253281 PoCVX Search 10.6.18 Local Buffer Overflow via Directory Field
• CVE-2018-253291 PoCWordPress Plugin WP with Spritz 1.0 Remote File Inclusion
• CVE-2018-253301 PoCJoomla! EkRishta 2.10 Persistent XSS and SQL Injection
• CVE-2018-253311 PoCZenar Content Management System Cross-Site Scripting via ajax.php
• CVE-2018-253321 PoCGitBucket 4.23.1 Unauthenticated Remote Code Execution
• CVE-2018-253331 PoCNordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection
• CVE-2018-253341 PoCZechat 1.5 Cross-Site Request Forgery (CSRF) via hashtag parameter
• CVE-2018-253351 PoCWordPress Plugin Peugeot Music 1.0 Arbitrary File Upload
• CVE-2018-253361 PoCjCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
• CVE-2018-253371 PoCJoomla JoomOCShop 1.0 Cross-Site Request Forgery
• CVE-2018-253381 PoCZechat 1.5 SQL Injection via hashtag parameter
• CVE-2018-253391 PoCZechat 1.5 SQL Injection via v parameter (time-based blind)
• CVE-2018-253401 PoCSmartshop 1 SQL Injection via category.php
• CVE-2018-253411 PoCSmartshop 1 SQL Injection via product.php id Parameter
• CVE-2018-253421 PoCSmartshop 1 SQL Injection via search.php
• CVE-2018-253431 PoCSmartshop 1 Cross-Site Request Forgery via editprofile.php
• CVE-2018-253441 PoC10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
• CVE-2018-253451 PoC10-Strike Network Scanner 3.0 Local Buffer Overflow SEH
• CVE-2018-253461 PoCWordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
• CVE-2018-253471 PoCWordPress Contact Form Maker Plugin 1.12.20 SQL Injection
• CVE-2018-253481 PoCJoomla! Component Ek Rishta 2.10 SQL Injection via user_detail
• CVE-2018-253491 PoCuserSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header
• CVE-2018-253501 PoCuserSpice 4.3.24 Username Enumeration via existingUsernameCheck.php
• CVE-2018-253511 PoCJoomla! Component EkRishta 2.10 SQL Injection via username
• CVE-2018-253521 PoCWordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
• CVE-2018-253531 PoCRedaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
• CVE-2018-253541 PoCJoomla Component jomres 9.11.2 Cross-Site Request Forgery
• CVE-2018-253551 PoCAudiograbber 1.83 Local Buffer Overflow via SEH
• CVE-2018-253561 PoCSIPp 3.6 Local Buffer Overflow via Command-line Arguments
• CVE-2018-253571 PoCDolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php
• CVE-2018-253581 PoCD-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
• CVE-2018-253591 PoCSplinterware System Scheduler Pro 5.12 Privilege Escalation
• CVE-2018-253601 PoCAgataSoft Auto PingMaster 1.5 Buffer Overflow SEH
• CVE-2018-253611 PoCSoroush IM Desktop App 0.17.0 Authentication Bypass via Database Injection
• CVE-2018-253621 PoCTwitter-Clone 1 SQL Injection via follow.php
• CVE-2018-253631 PoCTwitter-Clone 1 Cross-Site Request Forgery via tweetdel.php
• CVE-2018-253641 PoCTwitter-Clone 1 SQL Injection via search.php
• CVE-2018-253651 PoCPCViewer vt1000 Directory Traversal via GET Request
• CVE-2018-253661 PoCCuteFTP 5.0 XP Buffer Overflow via Site Manager Label Field
• CVE-2018-253671 PoCNASA openVSP 3.16.1 Denial of Service via Buffer Overflow
• CVE-2018-253681 PoCNord VPN 6.14.31 Denial of Service via Password Field
• CVE-2018-253691 PoCVisual Ping 0.8.0.0 Buffer Overflow Denial of Service
• CVE-2018-253701 PoCAdmidio 3.3.5 Cross-Site Request Forgery via roles_function.php
• CVE-2018-253711 PoCmooSocial Store Plugin 2.6 SQL Injection via product parameter
• CVE-2018-253721 PoCMedDream PACS Server Premium 6.7.1.1 SQL Injection via email
• CVE-2018-253731 PoCDVD Photo Slideshow Professional 8.07 Buffer Overflow SEH
• CVE-2018-253741 PoCSoftneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal
• CVE-2018-253751 PoCSocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH
• CVE-2018-253761 PoCSocusoft 3GP Photo Slideshow 8.05 Buffer Overflow SEH
• CVE-2018-253771 PoCFlash Slideshow Maker Professional 5.20 Buffer Overflow SEH
• CVE-2018-253781 PoCNotebook Pro 2.0 Denial of Service via Notebook Name Field
• CVE-2018-253791 PoCCollectric CMU 1.0 SQL Injection via lang Parameter
• CVE-2018-253801 PoCJoomla Component eXtroForms 2.1.5 SQL Injection via filter parameters
• CVE-2018-253811 PoCJoomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters
• CVE-2018-253821 PoCZechat 1.5 SQL Injection via uname Parameter
• CVE-2018-253831 PoCFree MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass
• CVE-2018-253841 PoCWikidforum 2.20 Cross-Site Scripting via reply_text Parameter
• CVE-2018-253851 PoCE-Registrasi Pencak Silat 18.10 SQL Injection via id_partai
• CVE-2018-253861 PoCHaPe PKH 1.1 SQL Injection via id Parameter in admin/media.php
• CVE-2018-253871 PoCHaPe PKH 1.1 Cross-Site Request Forgery via aksi_user.php
• CVE-2018-253881 PoCHaPe PKH 1.1 Arbitrary File Upload via aksi_foto.php
• CVE-2018-253891 PoCHaPe PKH 1.1 SQL Injection via nama_kelompok Parameter
• CVE-2018-253901 PoCHaPe PKH 1.1 SQL Injection via desa Parameter
• CVE-2018-253911 PoCHaPe PKH 1.1 Missing Authorization Allows Unauthenticated Record Deletion
• CVE-2018-253921 PoCMaxOn ERP Software 8.x-9.x SQL Injection via nomor Parameter
• CVE-2018-253931 PoCNavigate CMS 2.8.5 Path Traversal via navigate_download.php
• CVE-2018-253941 PoCKados R10 GreenBee SQL Injection via update_release.php
• CVE-2018-253951 PoCKados R10 GreenBee SQL Injection via update_feature.php
• CVE-2018-253961 PoCHeatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
• CVE-2018-253971 PoCPHP-SHOP 1.0 Cross-Site Request Forgery via users.php
• CVE-2018-253981 PoCThe Open ISES Project 3.30A SQL Injection via main.php
• CVE-2018-253991 PoCThe Open ISES Project 3.30A SQL Injection via nearby.php
• CVE-2018-254001 PoCThe Open ISES Project 3.30A SQL Injection via form_post.php
• CVE-2018-254011 PoCThe Open ISES Project 3.30A SQL Injection via sever_graph.php
• CVE-2018-254021 PoCThe Open ISES Project 3.30A SQL Injection via inc_types_graph.php
• CVE-2018-254031 PoCThe Open ISES Project 3.30A SQL Injection via city_graph.php
• CVE-2018-254041 PoCThe Open ISES Project 3.30A SQL Injection via add_facnote.php
• CVE-2018-254051 PoCeNdonesia Portal 8.7 SQL Injection via mod.php
• CVE-2018-254061 PoCeNdonesia Portal 8.7 SQL Injection via mod.php
• CVE-2018-254071 PoCeNdonesia Portal 8.7 SQL Injection via mod.php
• CVE-2018-254081 PoCThe Open ISES Project 3.30A Path Traversal Arbitrary File Download
• CVE-2018-254091 PoCSIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php
• CVE-2018-254101 PoCSIM-PKH 2.4.1 SQL Injection via media.php id Parameter
• CVE-2018-254111 PoCMGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php
• CVE-2018-254121 PoCDelta Sql 1.8.2 Arbitrary File Upload via docs_upload.php
• CVE-2018-254131 PoCAiOPMSD Final 1.0.0 SQL Injection via search.php
• CVE-2018-254141 PoCAiOPMSD Final 1.0.0 SQL Injection via actor.php
• CVE-2018-254151 PoCAiOPMSD Final 1.0.0 SQL Injection via director Parameter
• CVE-2018-254161 PoCAiOPMSD Final 1.0.0 SQL Injection via country.php
• CVE-2018-254171 PoCAiOPMSD Final 1.0.0 SQL Injection via quality.php
• CVE-2018-254181 PoCAiOPMSD Final 1.0.0 SQL Injection via year.php
• CVE-2018-254191 PoCAiOPMSD Final 1.0.0 SQL Injection via genre.php
• CVE-2018-254201 PoCAiOPMSD Final 1.0.0 SQL Injection via watch.php
• CVE-2018-254211 PoCOpen STA Manager 2.3 Arbitrary File Download via Path Traversal
• CVE-2018-254221 PoCMOGG web simulator Script All Version SQL Injection via play.php
• CVE-2018-254231 PoCArm Whois 3.11 Denial of Service via Buffer Overflow
• CVE-2018-254241 PoCGate Pass Management System 2.1 SQL Injection via login-exec.php
• CVE-2018-254251 PoCYot CMS 3.3.1 SQL Injection via aid and cid Parameters
• CVE-2018-254261 PoCWinMTR 0.91 Denial of Service via Buffer Overflow
• CVE-2018-254271 PoCArm Whois 3.11 Buffer Overflow via SEH Overwrite
• CVE-2018-254281 PoCParoiciel 11.20 SQL Injection via tRecIdListe Parameter
• CVE-2018-254291 PoCParoiciel 11.20 SQL Injection via zProIdPro Parameter
• CVE-2018-254301 PoCParoiciel 11.20 SQL Injection via eGeqIdEquipe Parameter
• CVE-2018-254311 PoCNo-Cms 1.0 SQL Injection via order_by Parameter
• CVE-2018-254321 PoCArm Whois 3.11 Buffer Overflow via ASLR Bypass
• CVE-2018-254331 PoCJoomla JE Photo Gallery 1.1 SQL Injection via categoryid
• CVE-2018-254341 PoCWP AutoSuggest 0.24 SQL Injection via autosuggest.php
• CVE-2018-254351 PoCZeusCart 4.0 Deactivate Customer Accounts CSRF
• CVE-2018-254361 PoCWordPress Plugin Baggage Freight Shipping Australia 0.1.0 Arbitrary File Upload
• CVE-2018-254371 PoCWordPress CherryFramework Themes 3.1.4 Backup File Download