CVE-2019-25000 to CVE-2019-25999

542 CVEs with public proof-of-concept exploits.

• CVE-2019-250112 PoCsNetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by…
• CVE-2019-250161 PoCIn OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule…
• CVE-2019-250171 PoCAn issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server…
• CVE-2019-250181 PoCIn the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an…
• CVE-2019-250231 PoCAn issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side)…
• CVE-2019-250242 PoCsOpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php…
• CVE-2019-250461 PoCThe Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.
• CVE-2019-250601 PoCWP-GraphQL < 0.3.5 - Improper Access Control
• CVE-2019-250611 PoCThe random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due…
• CVE-2019-250621 PoCSricam IP CCTV Camera Device Viewer stack-based overflow
• CVE-2019-250655 PoCsOpenNetAdmin os command injection
• CVE-2019-250663 PoCsajenti API privileges management
• CVE-2019-250671 PoCPodman/Varlink API Privilege Escalation
• CVE-2019-250701 PoCWolfCMS User Add cross site scripting
• CVE-2019-250762 PoCsThe TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service…
• CVE-2019-251021 PoCsimple-markdown simple-markdown.js redos
• CVE-2019-251374 PoCsUmbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an…
• CVE-2019-251411 PoCEasy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
• CVE-2019-251421 PoCMesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update
• CVE-2019-251521 PoCAbandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
• CVE-2019-251621 PoCi2c: Fix a potential use after free
• CVE-2019-252131 PoCAdvanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
• CVE-2019-252241 PoCWP Database Backup < 5.2 - Unauthenticated OS Command Injection
• CVE-2019-252251 PoC`sanitize-html` prior to version 2.0.0-beta is vulnerable to Cross-site Scripting (XSS). The `sanitizeHtml()` function in `index.js` does…
• CVE-2019-252262 PoCsDongyoung Media DM-AP240T/W Unauthenticated Configuration Disclosure
• CVE-2019-252271 PoCTellion HN-2204AP Unauthenticated Configuration Disclosure
• CVE-2019-252311 PoCdevolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege Escalation
• CVE-2019-252321 PoCNetPCLinker 1.0.0.0 - Buffer Overflow
• CVE-2019-252331 PoCAVE DOMINAplus 1.10.x Cross-Site Request Forgery and XSS Vulnerabilities
• CVE-2019-252341 PoCCarlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS
• CVE-2019-252351 PoCSmartwares HOME easy 1.0.9 Client-Side Authentication Bypass via Web Pages
• CVE-2019-252361 PoCiSeeQ Hybrid DVR WH-H4 1.03R Unauthenticated Live Stream Disclosure
• CVE-2019-252371 PoCV-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role Parameter
• CVE-2019-252381 PoCV-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery Vulnerability
• CVE-2019-252391 PoCV-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration Download
• CVE-2019-252401 PoCRifatron 5brid DVR 5brid DVR (HD6-532/516, DX6-516/508/504, MX6-516/508/504, EH6-504) Unauthenticated Live Stream Disclosure via animate.cgi
• CVE-2019-252411 PoCFaceSentry Access Control System 6.4.8 Remote SSH Root Access
• CVE-2019-252421 PoCFaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface
• CVE-2019-252431 PoCFaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Test
• CVE-2019-252441 PoCLegrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities
• CVE-2019-252451 PoCRoss Video DashBoard 8.5.1 Privilege Escalation via Insecure Permissions
• CVE-2019-252462 PoCsBeward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure
• CVE-2019-252471 PoCBeward N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Vulnerability
• CVE-2019-252481 PoCBeward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure
• CVE-2019-252491 PoCdevolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr
• CVE-2019-252501 PoCDevolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery
• CVE-2019-252511 PoCTeradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings
• CVE-2019-252521 PoCTeradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password Change
• CVE-2019-252531 PoCKYOCERA Net Admin 3.4.0906 Unauthenticated XML External Entity Injection
• CVE-2019-252541 PoCKYOCERA Net Admin 3.4.0906 Cross-Site Request Forgery via User Administration
• CVE-2019-252551 PoCVideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution
• CVE-2019-252561 PoCVideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal
• CVE-2019-252571 PoCLogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
• CVE-2019-252581 PoCLogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
• CVE-2019-252592 PoCsLeica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery
• CVE-2019-252603 PoCsOXID eShop 6.3.4 - 'sorting' SQL Injection
• CVE-2019-252611 PoCAnyDesk 5.4.0 - Unquoted Service Path
• CVE-2019-252631 PoCZendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting
• CVE-2019-252641 PoCSnipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting
• CVE-2019-252651 PoCOnline Inventory Manager 3.2 - Persistent Cross-Site Scripting
• CVE-2019-252661 PoCWondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path
• CVE-2019-252671 PoCWing FTP Server 6.0.7 - Unquoted Service Path
• CVE-2019-252681 PoCNREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution
• CVE-2019-252691 PoCAmiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability
• CVE-2019-252701 PoCSOCA Access Control System 180612 Reflected Cross-Site Scripting via logged_page.php
• CVE-2019-252711 PoCNETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path
• CVE-2019-252721 PoCTexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path
• CVE-2019-252731 PoCEasy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path
• CVE-2019-252741 PoCProShow Producer 9.0.3797 - Unquoted Service Path
• CVE-2019-252751 PoCBartVPN 1.2.2 - 'BartVPNService' Unquoted Service Path
• CVE-2019-252761 PoCStudio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path
• CVE-2019-252771 PoCFaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php
• CVE-2019-252781 PoCFaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
• CVE-2019-252791 PoCFaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability
• CVE-2019-252801 PoCYahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter
• CVE-2019-252811 PoCNCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
• CVE-2019-252821 PoCV-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html
• CVE-2019-252831 PoCShrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path
• CVE-2019-252841 PoCV-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Reflected Cross-Site Scripting Vulnerability
• CVE-2019-252851 PoCAlps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path
• CVE-2019-252861 PoC_GCafé 3.0 - 'gbClienService' Unquoted Service Path
• CVE-2019-252871 PoCAdaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path
• CVE-2019-252881 PoCWacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path
• CVE-2019-252892 PoCsINIM Electronics SmartLiving SmartLAN/G/SI <=6.x Remote Command Execution
• CVE-2019-252902 PoCsINIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage
• CVE-2019-252912 PoCsINIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability
• CVE-2019-252921 PoCAlps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path
• CVE-2019-252931 PoCBlue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path
• CVE-2019-252941 PoChtml5_snmp 1.11 - 'Remark' Persistent Cross-Site Scripting
• CVE-2019-252972 PoCsPoll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 Stored XSS
• CVE-2019-252981 PoChtml5_snmp 1.11 - 'Router_ID' SQL Injection
• CVE-2019-252991 PoCrimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection
• CVE-2019-253001 PoCthejshen Globitek CMS 1.4 - 'id' SQL Injection
• CVE-2019-253011 PoCthrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting
• CVE-2019-253021 PoCAcer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path
• CVE-2019-253031 PoCTheJshen contentManagementSystem 1.04 - 'id' SQL Injection
• CVE-2019-253041 PoCIntelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
• CVE-2019-253051 PoCJumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
• CVE-2019-253061 PoCBlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path
• CVE-2019-253071 PoCWorkgroupMail 7.5.1 - 'WorkgroupMail' Unquoted Service Path
• CVE-2019-253081 PoCMikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path
• CVE-2019-253091 PoCZilab Remote Console Server 3.2.9 - 'Zilab Remote Console Server' Unquoted Service Path
• CVE-2019-253101 PoCActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path
• CVE-2019-253111 PoCthesystem Persistent XSS
• CVE-2019-253121 PoCInoERP 0.7.2 - Persistent Cross-Site Scripting
• CVE-2019-253131 PoCFlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)
• CVE-2019-253141 PoCDuplicate-Post 3.2.3 - Persistent Cross-Site Scripting
• CVE-2019-253151 PoCWP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting
• CVE-2019-253161 PoCGOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting
• CVE-2019-253171 PoCKimai 2- persistent cross-site scripting (XSS)
• CVE-2019-253182 PoCsAVS Audio Converter 9.1.2.600 - Stack Overflow
• CVE-2019-253191 PoCDomain Quester Pro 6.02 - Stack Overflow (SEH)
• CVE-2019-253201 PoCelearning-script 1.0 - Authentication Bypass
• CVE-2019-253212 PoCsFTP Navigator 8.03 - Stack Overflow (SEH)
• CVE-2019-253221 PoCHeatmiser Netmonitor 3.03 - Hardcoded Credentials
• CVE-2019-253231 PoCHeatmiser Netmonitor 3.03 - HTML Injection
• CVE-2019-253241 PoCRICOH Web Image Monitor 1.09 - HTML Injection
• CVE-2019-253254 PoCsThrive Smart Home 1.1 - 'Smart Home' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2019-253261 PoCipPulse 1.92 - 'Enter Key' Denial of Service
• CVE-2019-253271 PoCPrime95 Version 29.8 build 6 - Buffer Overflow (SEH)
• CVE-2019-253281 PoCXnConvert 1.82 - Denial of Service
• CVE-2019-253291 PoCFTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)
• CVE-2019-253301 PoCSurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service (SEH)
• CVE-2019-253311 PoCAVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow
• CVE-2019-253322 PoCsFTP Commander Pro 8.03 - Local Stack Overflow
• CVE-2019-253331 PoCBullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2019-253341 PoCProduct Key Explorer 4.2.0.0 - 'Name' Denial of Service
• CVE-2019-253351 PoCPRO-7070 Hazır Profesyonel Web Sitesi 1.0 - Authentication Bypass
• CVE-2019-253362 PoCsSpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)
• CVE-2019-253371 PoCOwnCloud 8.1.8 - Username Disclosure
• CVE-2019-253381 PoCDokuwiki 2018-04-22b - Username Enumeration
• CVE-2019-253391 PoCGHIA CamIP 1.2 for iOS - 'Password' Denial of Service
• CVE-2019-253401 PoCSpotAuditor 5.3.2 - 'Base64' Denial Of Service
• CVE-2019-253411 PoCiNetTools for iOS 8.20 - 'Whois' Denial of Service
• CVE-2019-253421 PoCCentova Cast 3.2.12 - Denial of Service
• CVE-2019-253431 PoCNextVPN 4.10 - Insecure File Permissions
• CVE-2019-253441 PoCMobileGo 8.5.0 - Insecure File Permissions
• CVE-2019-253451 PoCRTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path
• CVE-2019-253461 PoCthesystem 1.0 - 'server_name' SQL Injection
• CVE-2019-253471 PoCthesystem App 1.0 - 'username' SQL Injection
• CVE-2019-253491 PoCscadaApp for iOS 1.1.4.0 - 'Servername' Denial of Service
• CVE-2019-253501 PoCXMedia Recode 3.4.8.6 - '.m3u' Denial Of Service
• CVE-2019-253511 PoCCentova Cast 3.2.11 - Arbitrary File Download
• CVE-2019-253521 PoCGenivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path Traversal
• CVE-2019-253531 PoCFoscam Video Management System 1.1.4.9 - 'Username' Denial of Service
• CVE-2019-253541 PoCiSmartViewPro 1.3.34 - Denial of Service
• CVE-2019-253551 PoCGenivia gSOAP 2.8 - 'gSOAP' Path Traversal
• CVE-2019-253561 PoCBematech Printer MP-4200 TH Cross-Site Scripting
• CVE-2019-253571 PoCControl Center PRO 6.2.9 - Local Stack Based BufferOverflow
• CVE-2019-253581 PoCFileOptimizer 14.00.2524 - Denial of Service
• CVE-2019-253591 PoCSD.NET RIM 4.7.3c - 'idtyp' SQL Injection
• CVE-2019-253601 PoCAida64 6.10.5200 - Buffer Overflow
• CVE-2019-253611 PoCAyukov NFTP client 1.71 - 'SYST' Buffer Overflow
• CVE-2019-253622 PoCsWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow
• CVE-2019-253631 PoCWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service
• CVE-2019-253641 PoCWin10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow
• CVE-2019-253651 PoCChaosPro 2.0 - Buffer Overflow
• CVE-2019-253661 PoCmicroASP Portal+ CMS SQL Injection via pagina.phtml
• CVE-2019-253671 PoCArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface
• CVE-2019-253681 PoCOPNsense 19.1 Reflected XSS via diag_backup.php
• CVE-2019-253691 PoCOPNsense 19.1 Stored XSS via system_advanced_sysctl.php
• CVE-2019-253701 PoCOPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php
• CVE-2019-253711 PoCOPNsense 19.1 Reflected XSS via diag_ping.php
• CVE-2019-253721 PoCOPNsense 19.1 Reflected XSS via diag_traceroute.php
• CVE-2019-253731 PoCOPNsense 19.1 Stored XSS via firewall_rules_edit.php
• CVE-2019-253741 PoCOPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php
• CVE-2019-253751 PoCOPNsense 19.1 Reflected XSS via monit interface
• CVE-2019-253761 PoCOPNsense 19.1 Reflected XSS via proxy endpoint
• CVE-2019-253771 PoCOPNsense 19.1 Reflected XSS via system_advanced_sysctl.php
• CVE-2019-253781 PoCSmoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting
• CVE-2019-253791 PoCSmoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting
• CVE-2019-253801 PoCSmoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting
• CVE-2019-253811 PoCSmoothwall Express 3.1 'hosts.cgi' Cross-Site Scripting
• CVE-2019-253821 PoCSmoothwall Express 3.1 'time.cgi' Cross-Site Scripting
• CVE-2019-253831 PoCSmoothwall Express 3.1 'apcupsd.cgi' Cross-Site Scripting
• CVE-2019-253841 PoCSmoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting
• CVE-2019-253851 PoCSmoothwall Express 3.1 'outgoing.cgi' Cross-Site Scripting
• CVE-2019-253861 PoCSmoothwall Express 3.1 'dmzholes.cgi' Cross-Site Scripting
• CVE-2019-253871 PoCSmoothwall Express 3.1 'xtaccess.cgi' Cross-Site Scripting
• CVE-2019-253881 PoCSmoothwall Express 3.1 'ipblock.cgi' Cross-Site Scripting
• CVE-2019-253891 PoCSmoothwall Express 3.1 'timedaccess.cgi' Cross-Site Scripting
• CVE-2019-253901 PoCSmoothwall Express 3.1 'interfaces.cgi' Cross-Site Scripting
• CVE-2019-253911 PoCAshop Shopping Cart Software Lastest Latest SQL Injection via bannedcustomers.php
• CVE-2019-253921 PoCSmoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting
• CVE-2019-253931 PoCSmoothwall Express 3.1 'smoothinfo.cgi' Cross-Site Scripting
• CVE-2019-253941 PoCSmoothwall Express 3.1 'modem.cgi' Cross-Site Scripting
• CVE-2019-253951 PoCSmoothwall Express 3.1 'preferences.cgi' Cross-Site Scripting
• CVE-2019-253961 PoCIPFire 2.21 Core Update 127 Reflected XSS via updatexlrator.cgi
• CVE-2019-253971 PoCIPFire 2.21 Core Update 127 Cross-Site Scripting via hosts.cgi
• CVE-2019-253981 PoCIPFire 2.21 Core Update 127 Cross-Site Scripting via ovpnmain.cgi
• CVE-2019-253991 PoCIPFire 2.21 Core Update 127 Stored XSS via extrahd.cgi
• CVE-2019-254001 PoCIPFire 2.21 Core Update 127 Multiple XSS via fwhosts.cgi
• CVE-2019-254011 PoCBematech Printer MP-4200 TH Denial of Service
• CVE-2019-254021 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via login
• CVE-2019-254031 PoCComodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via admin_profiles
• CVE-2019-254041 PoCComodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via admins
• CVE-2019-254051 PoCComodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via license_activation
• CVE-2019-254061 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via organization Parameter
• CVE-2019-254071 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via backupschedule
• CVE-2019-254081 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via netwizard2
• CVE-2019-254091 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via routing
• CVE-2019-254101 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via policy_routing
• CVE-2019-254111 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via DHCP
• CVE-2019-254121 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via NTP_SERVER_LIST
• CVE-2019-254131 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via ID Parameter
• CVE-2019-254141 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via ID Parameter Appid
• CVE-2019-254151 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via hotspot_permanent_users
• CVE-2019-254161 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via device Parameter
• CVE-2019-254171 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via QoS Rules
• CVE-2019-254181 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via fwgroups
• CVE-2019-254191 PoCComodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via schedule
• CVE-2019-254201 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via snat
• CVE-2019-254211 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via policyfw
• CVE-2019-254221 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via vpnfw
• CVE-2019-254231 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig
• CVE-2019-254241 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via https_exceptions
• CVE-2019-254251 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via smtpconfig
• CVE-2019-254261 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via dnsmasq
• CVE-2019-254271 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via antispyware
• CVE-2019-254281 PoCComodo Dome Firewall 2.7.0 Cross-Site Scripting via openvpn_users
• CVE-2019-254291 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via openvpn_advanced
• CVE-2019-254301 PoCComodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via vpn_users
• CVE-2019-254311 PoCdelpino73 Blue-Smiley-Organizer 1.32 SQL Injection via datetime
• CVE-2019-254321 PoCPart-DB 0.4 Authentication Bypass via login.php
• CVE-2019-254331 PoCXOOPS CMS 2.5.9 SQL Injection via gerar_pdf.php
• CVE-2019-254341 PoCSpotAuditor 5.3.1.0 Denial of Service via Registration Name Field
• CVE-2019-254351 PoCSricam DeviceViewer 3.12.0.1 Local Buffer Overflow DEP Bypass
• CVE-2019-254361 PoCSricam DeviceViewer 3.12.0.1 Password Change Security Bypass
• CVE-2019-254371 PoCFoscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service
• CVE-2019-254381 PoCLabCollector 5.423 SQL Injection via login.php
• CVE-2019-254391 PoCNoviSmart CMS SQL Injection via Referer HTTP Header
• CVE-2019-254401 PoCWebIncorp ERP Every version SQL Injection via product_detail.php
• CVE-2019-254411 PoCthesystem 1.0 Command Injection via run_command endpoint
• CVE-2019-254421 PoCWeb Wiz Forums 12.01 SQL Injection via PF Parameter
• CVE-2019-254431 PoCInventory Webapp SQL Injection via add-item.php
• CVE-2019-254441 PoCFiverr Clone Script 1.2.2 SQL Injection via page Parameter
• CVE-2019-254451 PoCFiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php
• CVE-2019-254461 PoCDIGIT CENTRIS ERP Every version SQL Injection via datum1 Parameter
• CVE-2019-254471 PoCOrientDB 3.0.17 Cross-Site Request Forgery
• CVE-2019-254481 PoCOrientDB 3.0.17 Stored Cross-Site Scripting via User Creation
• CVE-2019-254491 PoCOrientDB 3.0.17 Reflected Cross-Site Scripting via document endpoint
• CVE-2019-254501 PoCDolibarr ERP/CRM 10.0.1 SQL Injection via card.php
• CVE-2019-254511 PoCphpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php
• CVE-2019-254521 PoCDolibarr ERP/CRM 10.0.1 SQL Injection via elemid
• CVE-2019-254531 PoCphpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php
• CVE-2019-254541 PoCphpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter
• CVE-2019-254551 PoCWeb Ofisi E-Ticaret v3 SQL Injection via ara.html
• CVE-2019-254561 PoCWeb Ofisi Emlak v2 SQL Injection via ara Parameter
• CVE-2019-254571 PoCWeb Ofisi Firma v13 SQL Injection via oz Parameter
• CVE-2019-254581 PoCWeb Ofisi Firma Rehberi v1 SQL Injection via firmalar.html
• CVE-2019-254591 PoCWeb Ofisi Emlak V2 SQL Injection via emlak-ara.html
• CVE-2019-254601 PoCWeb Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter
• CVE-2019-254611 PoCWeb Ofisi Platinum E-Ticaret v5 SQL Injection via ajax/productsFilterSearch
• CVE-2019-254621 PoCWeb Ofisi Rent a Car v3 SQL Injection via klima Parameter
• CVE-2019-254631 PoCSpotIE Internet Explorer Password Recovery 2.9.5 Key Field DoS
• CVE-2019-254641 PoCInputMapper 1.6.10 Local Denial of Service via Username Field
• CVE-2019-254651 PoCHisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
• CVE-2019-254661 PoCEasy File Sharing Web Server 7.2 Local SEH Overflow
• CVE-2019-254671 PoCVerypdf docPrint Pro 8.0 Local SEH Buffer Overflow
• CVE-2019-254681 PoCNetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp
• CVE-2019-254691 PoCFolder Lock 7.7.9 Denial of Service via Serial Number Field
• CVE-2019-254701 PoCeWON Firmware 12.2-13.0 Authentication Bypass via wsdReadForm
• CVE-2019-254711 PoCFileThingie 2.5.7 Arbitrary File Upload via ft2.php
• CVE-2019-254721 PoCIntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile
• CVE-2019-254731 PoCClinic Pro SQL Injection via monthly_expense_overview month Parameter
• CVE-2019-254741 PoCEasy MP3 Downloader 4.7.8.8 Denial of Service Buffer Overflow
• CVE-2019-254751 PoCSQL Server Password Changer 1.90 Denial of Service Buffer Overflow
• CVE-2019-254761 PoCOutlook Password Recovery 2.10 Denial of Service Buffer Overflow
• CVE-2019-254771 PoCRAR Password Recovery 1.80 Denial of Service Buffer Overflow
• CVE-2019-254781 PoCGetGo Download Manager 6.2.2.3300 Buffer Overflow DoS
• CVE-2019-254791 PoCInout RealEstate Lastest SQL Injection via agentlistdetails
• CVE-2019-254801 PoCARMBot Unrestricted File Upload via upload.php
• CVE-2019-254811 PoCiScripts ReserveLogic Lastest SQL Injection via search endpoint
• CVE-2019-254821 PoCJettweb PHP Hazir Rent A Car Sitesi Scripti V2 SQL Injection
• CVE-2019-254831 PoCComtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k Restricted Shell Escape
• CVE-2019-254841 PoCWinMPG iPod Convert 3.0 Register Field Buffer Overflow DoS
• CVE-2019-254851 PoCR 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass
• CVE-2019-254861 PoCVarient 1.6.1 SQL Injection via user_id Parameter
• CVE-2019-254871 PoCSAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd
• CVE-2019-254881 PoCJettweb Hazir Rent A Car Scripti V4 SQL Injection via admin
• CVE-2019-254891 PoCHomey BNB V4 SQL Injection via ajax_refresh_subtotal
• CVE-2019-254901 PoCHomey BNB V4 SQL Injection via admin edit.php
• CVE-2019-254911 PoCHomey BNB V4 SQL Injection via cms_getpagetitle.php
• CVE-2019-254921 PoCHomey BNB V4 SQL Injection via getcmsdata.php
• CVE-2019-254931 PoCHomey BNB V4 SQL Injection via getrecord.php
• CVE-2019-254941 PoCHomey BNB V4 SQL Injection Authentication Bypass via Admin Panel
• CVE-2019-254951 PoCosCommerce 2.3.4.1 SQL Injection via reviews_id Parameter
• CVE-2019-254961 PoCosCommerce 2.3.4.1 SQL Injection via products_id Parameter
• CVE-2019-254971 PoCosCommerce 2.3.4.1 SQL Injection via currency Parameter
• CVE-2019-254981 PoCSimple Job Script SQL Injection via searched Endpoint
• CVE-2019-254991 PoCSimple Job Script SQL Injection via get_job_applications_ajax.php
• CVE-2019-255001 PoCSimple Job Script SQL Injection via register-recruiters endpoint
• CVE-2019-255011 PoCSimple Job Script SQL Injection via delete_application_ajax.php
• CVE-2019-255021 PoCSimple Job Script Cross-Site Scripting via job_type_value Parameter
• CVE-2019-255031 PoCPHPads 2.0 SQL Injection via click.php3 bannerID
• CVE-2019-255041 PoCNCrypted Jobgator Lastest SQL Injection via agents Find-Jobs
• CVE-2019-255051 PoCTradebox 5.4 SQL Injection via symbol Parameter
• CVE-2019-255061 PoCFreeSMS 2.1.2 Authentication Bypass via SQL Injection
• CVE-2019-255071 PoCAshop Shopping Cart Software Lastest SQL Injection via index.php
• CVE-2019-255081 PoCJettweb Php Hazir Ilan Sitesi Scripti V2 SQL Injection via katgetir.php
• CVE-2019-255091 PoCXooDigital Lastest Latest SQL Injection via results.php
• CVE-2019-255101 PoCJettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass
• CVE-2019-255111 PoCJettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection
• CVE-2019-255121 PoCJettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection
• CVE-2019-255131 PoCJettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection via datagetir.php
• CVE-2019-255141 PoCJettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection
• CVE-2019-255151 PoCJettweb PHP Hazir Haber Sitesi Scripti V3 Authentication Bypass
• CVE-2019-255161 PoCJettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via gallery.php
• CVE-2019-255171 PoCJettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via haberarsiv.php
• CVE-2019-255181 PoCJettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via arama.php
• CVE-2019-255191 PoCJettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection
• CVE-2019-255201 PoCJettweb PHP Hazir Haber Sitesi Scripti V1 Authentication Bypass
• CVE-2019-255211 PoCXooGallery Lastest Latest SQL Injection via gal.php gal_id
• CVE-2019-255221 PoCXooGallery Lastest Latest Multiple SQL Injections via photo.php
• CVE-2019-255231 PoCXooGallery Lastest Latest SQL Injection via cat.php
• CVE-2019-255241 PoCXooGallery Lastest Latest SQL Injection via results.php
• CVE-2019-255251 PoCInout EasyRooms Ultimate Edition v1.0 SQL Injection via search
• CVE-2019-255261 PoCInout EasyRooms Ultimate Edition v1.0 SQL Injection via search
• CVE-2019-255271 PoCInout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed
• CVE-2019-255281 PoCInout EasyRooms Ultimate Edition v1.0 SQL Injection via search
• CVE-2019-255291 PoCPlaceto CMS Alpha rv.4 SQL Injection via page Parameter
• CVE-2019-255301 PoCuHotelBooking System Lastest SQL Injection via system_page Parameter
• CVE-2019-255311 PoCNetartmedia Deals Portal Lastest SQL Injection via loginaction.php
• CVE-2019-255321 PoCNetartmedia Jobs Portal 6.1 SQL Injection via loginaction.php
• CVE-2019-255331 PoCNetartmedia PHP Business Directory 4.2 SQL Injection via loginaction.php
• CVE-2019-255341 PoCNetartmedia PHP Car Dealer SQL Injection via features parameter
• CVE-2019-255351 PoCNetartmedia PHP Dating Site SQL Injection via loginaction.php
• CVE-2019-255361 PoCNetartmedia PHP Real Estate Agency 4.0 SQL Injection via features parameter
• CVE-2019-255371 PoCNetartmedia Event Portal 2.0 SQL Injection via loginaction.php
• CVE-2019-255381 PoC202CMS v10 beta SQL Injection via log_user Parameter
• CVE-2019-255391 PoC202CMS v10 beta SQL Injection via register.php
• CVE-2019-255401 PoCNetartmedia PHP Mall 4.1 Multiple SQL Injection
• CVE-2019-255411 PoCNetartmedia PHP Mall 4.1 Multiple SQL Injection
• CVE-2019-255421 PoCNetartmedia Real Estate Portal 5.0 SQL Injection via index.php
• CVE-2019-255431 PoCNetartmedia Real Estate Portal 5.0 SQL Injection via index.php
• CVE-2019-255441 PoCPidgin 2.13.0 Denial of Service via Malformed Username
• CVE-2019-255451 PoCTerminal Services Manager 3.2.1 Local Buffer Overflow Denial of Service
• CVE-2019-255461 PoCNetAware 1.20 Share Name Denial of Service
• CVE-2019-255471 PoCNetAware 1.20 Denial of Service via Add Block Buffer Overflow
• CVE-2019-255481 PoCBlueStacks 4.80.0.1060 Denial of Service via Search Field
• CVE-2019-255491 PoCVeryPDF PCL Converter 2.7 Denial of Service via PDF Security
• CVE-2019-255501 PoCEncrypt PDF 2.3 Denial of Service via Buffer Overflow
• CVE-2019-255511 PoCSandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow
• CVE-2019-255521 PoCCEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field
• CVE-2019-255531 PoCCEWE PHOTO IMPORTER 6.4.3 Denial of Service via Malformed Image
• CVE-2019-255541 PoCTomabo MP4 Converter 3.25.22 Denial of Service via Name Field
• CVE-2019-255551 PoCTwistedBrush Pro Studio 24.06 Script Recorder Denial of Service
• CVE-2019-255561 PoCTwistedBrush Pro Studio 24.06 Resize Image Denial of Service
• CVE-2019-255571 PoCTwistedBrush Pro Studio 24.06 Denial of Service via srp File
• CVE-2019-255581 PoCSelfie Studio 2.17 Denial of Service via Resize Image
• CVE-2019-255591 PoCSpotPaltalk 1.1.5 Name/Key Field Denial of Service
• CVE-2019-255601 PoCLyric Video Creator 2.1 Denial of Service via MP3 File
• CVE-2019-255611 PoCLyric Maker 2.0.1.0 Denial of Service via Buffer Overflow
• CVE-2019-255621 PoCjetAudio 8.1.7 Denial of Service via File Naming Buffer Overflow
• CVE-2019-255631 PoCPCHelpWareV2 1.0.0.5 Denial of Service via SC Creation
• CVE-2019-255641 PoCPCHelpWareV2 1.0.0.5 Denial of Service via Group Field
• CVE-2019-255651 PoCMagic Iso Maker 5.5 Buffer Overflow Denial of Service
• CVE-2019-255661 PoCTransMac 12.3 Denial of Service via Volume Name Field
• CVE-2019-255671 PoCValentina Studio 9.0.5 Linux Buffer Overflow via Host Field
• CVE-2019-255681 PoCMemu Play 6.0.7 Privilege Escalation via Insecure File Permissions
• CVE-2019-255691 PoCRealTerm Serial Terminal 2.0.0.70 SEH Overflow Crash
• CVE-2019-255701 PoCRealTerm Serial Terminal 2.0.0.70 Denial of Service via Port Field
• CVE-2019-255711 PoCMediaMonkey 4.1.23 Denial of Service via Malformed URL
• CVE-2019-255721 PoCNordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow
• CVE-2019-255731 PoCGreen CMS 2.x SQL Injection via cat Parameter
• CVE-2019-255741 PoCGreen CMS 2.x Path Traversal Arbitrary File Download
• CVE-2019-255751 PoCSimplePress CMS 1.0.7 SQL Injection via p and s Parameters
• CVE-2019-255761 PoCKepler Wallpaper Script 1.1 SQL Injection via category
• CVE-2019-255771 PoCSeoToaster Ecommerce 3.0.0 Local File Inclusion via backend_theme
• CVE-2019-255781 PoCphpTransformer 2016.9 SQL Injection via GeneratePDF.php
• CVE-2019-255791 PoCphpTransformer 2016.9 Directory Traversal via jQueryFileUpload
• CVE-2019-255801 PoCownDMS 4.7 SQL Injection via pdfstream.php imagestream.php
• CVE-2019-255811 PoCi-doit CMDB 1.12 SQL Injection via objGroupID Parameter
• CVE-2019-255821 PoCi-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter
• CVE-2019-255831 PoCRarmaRadio 2.72.3 Username Field Denial of Service
• CVE-2019-255841 PoCRarmaRadio 2.72.3 Server Field Buffer Overflow Denial of Service
• CVE-2019-255851 PoCDeluge 1.3.15 Denial of Service via Webseeds Field
• CVE-2019-255861 PoCDeluge 1.3.15 Denial of Service via URL Field
• CVE-2019-255871 PoCBulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service
• CVE-2019-255881 PoCBulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address
• CVE-2019-255891 PoCZOC Terminal 7.23.4 Buffer Overflow Denial of Service
• CVE-2019-255901 PoCAxessh 4.2 Denial of Service via Log File Name
• CVE-2019-255911 PoCDNSS Domain Name Search Software 2.1.8 Denial of Service
• CVE-2019-255921 PoCPHPRunner 10.1 Denial of Service via Dashboard Name Field
• CVE-2019-255931 PoCjetCast Server 2.0 Denial of Service via Log Directory
• CVE-2019-255941 PoCASPRunner.NET 10.1 Denial of Service via Table Name Field
• CVE-2019-255951 PoCjetAudio 8.1.7.20702 Basic Denial of Service via URL Handler
• CVE-2019-255961 PoCSpotAuditor 5.2.6 Name Field Denial of Service
• CVE-2019-255971 PoCNSauditor 3.1.2.0 Denial of Service via Community Field
• CVE-2019-255981 PoCHeidiSQL Portable 10.1.0.5464 Denial of Service via Buffer Overflow
• CVE-2019-255991 PoCBackup Key Recovery 2.2.4 Denial of Service via Name Field
• CVE-2019-256001 PoCUltraVNC Viewer 1.2.2.4 Denial of Service via Buffer Overflow
• CVE-2019-256011 PoCUltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow
• CVE-2019-256021 PoCGSearch 1.0.1.0 Denial of Service via Search Input
• CVE-2019-256031 PoCTuneClone 2.20 Structured Exception Handler Buffer Overflow
• CVE-2019-256041 PoCDVDXPlayer Pro 5.5 Local Buffer Overflow with SEH
• CVE-2019-256051 PoCEquityPandit 1.0 Insecure Logging Information Disclosure
• CVE-2019-256061 PoCFast AVI MPEG Joiner 1.2.0812 Buffer Overflow Denial of Service
• CVE-2019-256073 PoCsAxessh 4.2 Local Stack-based Buffer Overflow via Log File Name
• CVE-2019-256081 PoCIperius Backup 6.1.0 Privilege Escalation via Backup Job
• CVE-2019-256091 PoCJetAudio jetCast Server 2.0 Local SEH Buffer Overflow
• CVE-2019-256101 PoCNetNumber Titan Master 7.9.1 Path Traversal via drp
• CVE-2019-256111 PoCMiniFtp parseconf_load_setting Buffer Overflow via Configuration
• CVE-2019-256121 PoCAdmin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path
• CVE-2019-256131 PoCEasy Chat Server 3.1 Denial of Service via message Parameter
• CVE-2019-256141 PoCFree Float FTP 1.0 STOR Command Remote Buffer Overflow
• CVE-2019-256151 PoCLavavo CD Ripper 4.20 Local SEH Buffer Overflow
• CVE-2019-256161 PoCAnMing MP3 CD Burner 2.0 Local Denial of Service
• CVE-2019-256171 PoCEase Audio Converter 5.30 Denial of Service via Audio Cutter
• CVE-2019-256181 PoCAdminExpress 1.2.5 Denial of Service via System Compare
• CVE-2019-256191 PoCFTP Shell Server 6.83 Buffer Overflow via Account Name
• CVE-2019-256201 PoCTree Studio 2.17 Denial of Service via Malformed Input
• CVE-2019-256211 PoCPixel Studio 2.17 Denial of Service via Malformed Input
• CVE-2019-256221 PoCPaint Studio 2.17 Denial of Service via Malformed Input
• CVE-2019-256231 PoCLuminance Studio 2.17 Denial of Service via Malformed Input
• CVE-2019-256241 PoCLiquid Studio 2.17 Denial of Service via Malformed Input
• CVE-2019-256251 PoCBlob Studio 2.17 Denial of Service via Malformed Input
• CVE-2019-256261 PoCRiver Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code
• CVE-2019-256271 PoCFlexHEX 2.71 Local Buffer Overflow via SEH Unicode
• CVE-2019-256281 PoCDownload Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow
• CVE-2019-256291 PoCAIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging
• CVE-2019-256301 PoCPhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager
• CVE-2019-256311 PoCAIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter
• CVE-2019-256321 PoCphpFileManager 1.7.8 Local File Inclusion via index.php
• CVE-2019-256331 PoCAIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter
• CVE-2019-256341 PoCBase64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
• CVE-2019-256351 PoCZeeways Matrimony CMS Lastest SQL Injection via profile_list
• CVE-2019-256361 PoCZeeways Jobsite CMS Lastest SQL Injection via id Parameter
• CVE-2019-256371 PoCX-NetStat Pro 5.63 Local Buffer Overflow via EggHunter
• CVE-2019-256381 PoCMeeplace Business Review Script Lastest SQL Injection via addclick.php
• CVE-2019-256391 PoCMatrimony Website Script M-Plus Multiple SQL Injection
• CVE-2019-256401 PoCInout Article Base CMS Lastest SQL Injection via portalLogin.php
• CVE-2019-256411 PoCNetartmedia Vlog System Lastest SQL Injection via email Parameter
• CVE-2019-256421 PoCBootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact Modules
• CVE-2019-256431 PoCeNdonesia Portal v8.7 SQL Injection via banners.php
• CVE-2019-256441 PoCWinMPG Video Convert 9.3.5 Buffer Overflow Local Denial of Service
• CVE-2019-256451 PoCWinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service
• CVE-2019-256461 PoCTabs Mail Carrier 2.5.1 Buffer Overflow via MAIL FROM
• CVE-2019-256471 PoCPhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager
• CVE-2019-256481 PoCMyVideoConverter Pro 3.14 Denial of Service Buffer Overflow
• CVE-2019-256491 PoCRiver Past Audio Converter 7.7.16 Local Buffer Overflow DoS
• CVE-2019-256501 PoCRiver Past CamDo 3.7.6 Structured Exception Handler Buffer Overflow
• CVE-2019-256531 PoCNavicat for Oracle 12.1.15 Password Field Denial of Service
• CVE-2019-256541 PoCCore FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow
• CVE-2019-256551 PoCDevice Monitoring Studio 8.10.00.8925 Denial of Service
• CVE-2019-256561 PoCR i386 3.5.0 Local Buffer Overflow SEH
• CVE-2019-256571 PoCAnyBurn 4.3 x86 Denial of Service via Image Conversion
• CVE-2019-256581 PoCa-Mac Address Change 5.4 Local Buffer Overflow DoS
• CVE-2019-256591 PoCASPRunner Professional 6.0.766 Local Buffer Overflow DoS
• CVE-2019-256601 PoCLanHelper 1.74 Denial of Service via Buffer Overflow
• CVE-2019-256611 PoCRemote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
• CVE-2019-256621 PoCResourceSpace 8.6 SQL Injection via watched_searches.php
• CVE-2019-256631 PoCSuiteCRM 7.10.7 SQL Injection via parentTab Parameter
• CVE-2019-256641 PoCSuiteCRM 7.10.7 SQL Injection via record Parameter
• CVE-2019-256651 PoCRiver Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS
• CVE-2019-256661 PoCSpotAuditor 3.6.7 Denial of Service Buffer Overflow
• CVE-2019-256671 PoCTaskInfo 8.2.0.280 Denial of Service Buffer Overflow
• CVE-2019-256681 PoCNews Website Script 2.0.5 SQL Injection via index.php
• CVE-2019-256691 PoCqdPM 9.1 SQL Injection via search_by_extrafields Parameter
• CVE-2019-256701 PoCRiver Past Video Cleaner 7.6.3 Buffer Overflow via SEH
• CVE-2019-256711 PoCVA MAX 8.3.4 Remote Code Execution via changeip.php
• CVE-2019-256721 PoCPilusCart 1.4.1 SQL Injection via send Parameter
• CVE-2019-256731 PoCUniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload
• CVE-2019-256741 PoCCMSsite 1.0 SQL Injection via post Parameter
• CVE-2019-256751 PoCeDirectory All Versions SQL Injection Authentication Bypass
• CVE-2019-256761 PoCAsk Expert Script 3.0.5 Cross Site Scripting SQL Injection
• CVE-2019-256771 PoCWinRAR 5.61 Denial of Service via Malformed Language File
• CVE-2019-256781 PoCC4G BLIS 3.4 SQL Injection via users_select.php
• CVE-2019-256791 PoCRealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
• CVE-2019-256801 PoCAdvance Gift Shop Pro Script 2.0.3 SQL Injection via search
• CVE-2019-256811 PoCXlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow
• CVE-2019-256821 PoCCMSsite 1.0 Cross-Site Request Forgery via users.php
• CVE-2019-256831 PoCFileZilla 3.40.0 Denial of Service via Local Search
• CVE-2019-256841 PoCOpenDocMan 1.3.4 SQL Injection via where Parameter
• CVE-2019-256861 PoCCore FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service
• CVE-2019-256871 PoCPegasus CMS 1.0 Remote Code Execution via extra_fields.php
• CVE-2019-256881 PoCKados R10 GreenBee SQL Injection via menu_lev1 Parameter
• CVE-2019-256891 PoCHTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH
• CVE-2019-256901 PoCKados R10 GreenBee SQL Injection via mng_profile_id
• CVE-2019-256911 PoCFaleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass
• CVE-2019-256921 PoCKados R10 GreenBee SQL Injection via id_to_modify Parameter
• CVE-2019-256931 PoCResourceSpace 8.6 SQL Injection via collection_edit.php
• CVE-2019-256941 PoCKados R10 GreenBee SQL Injection via user2reset
• CVE-2019-256951 PoCR 3.4.4 Local Buffer Overflow Windows XP SP3
• CVE-2019-256961 PoCKados R10 GreenBee SQL Injection via language_tag Parameter
• CVE-2019-256971 PoCCMSsite 1.0 SQL Injection via category.php
• CVE-2019-256981 PoCKados R10 GreenBee SQL Injection via id_to_delete Parameter
• CVE-2019-256991 PoCNewsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter
• CVE-2019-257001 PoCKados R10 GreenBee SQL Injection via sort_direction Parameter
• CVE-2019-257011 PoCEasy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH
• CVE-2019-257021 PoCKados R10 GreenBee SQL Injection via id_project Parameter
• CVE-2019-257031 PoCImpressCMS 1.3.11 SQL Injection via bid Parameter
• CVE-2019-257041 PoCKados R10 GreenBee SQL Injection via filter_user_mail
• CVE-2019-257051 PoCEcho Mirage 3.1 Stack Buffer Overflow via Rules Action Field
• CVE-2019-257061 PoCAcross DR-810 ROM-0 Unauthenticated File Disclosure
• CVE-2019-257071 PoCeBrigade ERP 4.5 SQL Injection via pdf.php
• CVE-2019-257081 PoCHeatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery
• CVE-2019-257091 PoCCF Image Hosting Script 1.6.5 Unauthorized Database Access
• CVE-2019-257101 PoCDolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter
• CVE-2019-257111 PoCSpotFTP Password Recover 2.4.2 Denial of Service via Name Field
• CVE-2019-257121 PoCBlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key
• CVE-2019-257131 PoCMyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter
• CVE-2019-257142 PoCsSeeyon Office Anywhere (OA) A8 Unauthenticated Arbitrary File Write via htmlofficeservlet
• CVE-2019-257261 PoCAll in One Video Downloader 1.2 SQL Injection via admin page-edit
• CVE-2019-257271 PoCWordPress Plugin ad manager wd 1.0.11 Arbitrary File Download
• CVE-2019-257281 PoCCare2x 2.7 Hospital Information System SQL Injection via ck_config
• CVE-2019-257291 PoCPDF Signer 3.0 Server-Side Template Injection RCE via CSRF Cookie
• CVE-2019-257301 PoCListing Hub CMS 1.0 SQL Injection via pages.php id
• CVE-2019-257311 PoCZuz Music 2.1 Persistent Cross-site Scripting via zuzconsole Contact
• CVE-2019-257321 PoCPHP EI-Tube Script 3 SQL Injection via search parameter
• CVE-2019-257331 PoCNetShareWatcher 1.5.8.0 SEH Buffer Overflow
• CVE-2019-257341 PoCContact Form by WD 1.13.1 CSRF to Local File Inclusion
• CVE-2019-257351 PoCAllPlayer 7.4 Local Buffer Overflow via SEH Unicode
• CVE-2019-257361 PoCLabF nfsAxe 3.7 Ping Client Buffer Overflow
• CVE-2019-257371 PoCLive Chat Unlimited 2.8.3 Stored Cross-Site Scripting
• CVE-2019-257381 PoCWordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change
• CVE-2019-257391 PoCGigToDo Freelance Marketplace Script 1.3 Persistent XSS
• CVE-2019-257401 PoCJoomla com_jsjobs 1.2.6 Arbitrary File Deletion
• CVE-2019-257411 PoCMobatek MobaXterm 12.1 Buffer Overflow via Sessions File
• CVE-2019-257421 PoCWordPress Theme Zoner Real Estate 4.1.1 Persistent XSS
• CVE-2019-257431 PoCWordPress Soliloquy Lite 2.5.6 Persistent Cross-Site Scripting
• CVE-2019-257441 PoCWordPress Popup Builder 3.49 Persistent Cross-Site Scripting
• CVE-2019-257451 PoCWordPress Plugin Google Review Slider 6.1 SQL Injection via tid
• CVE-2019-257461 PoCWordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter
• CVE-2019-257471 PoCNetwork Inventory Advisor 5.0.26.0 Unquoted Service Path Privilege Escalation
• CVE-2019-257481 PoCJoomla JHotelReservation 6.0.7 SQL Injection via search-hotels
• CVE-2019-257491 PoCJoomla J-CruisePortal 6.0.4 SQL Injection via cruises
• CVE-2019-257501 PoCJoomla J-MultipleHotelReservation 6.0.7 SQL Injection
• CVE-2019-257511 PoCJoomla J-ClassifiedsManager 3.0.5 SQL Injection
• CVE-2019-257521 PoCJoomla! Component J-BusinessDirectory 4.9.7 SQL Injection
• CVE-2019-257531 PoCJoomla! Component VMap 1.9.6 SQL Injection via loadmarker
• CVE-2019-257541 PoCJoomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout
• CVE-2019-257551 PoCJoomla vReview 1.9.11 SQL Injection via editReview
• CVE-2019-257561 PoCJoomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboard
• CVE-2019-257571 PoCJoomla vWishlist 1.0.1 SQL Injection via vproductid Parameter
• CVE-2019-257581 PoCJoomla! Component vBizz 1.0.7 Remote Code Execution
• CVE-2019-257591 PoCJoomla! Component vBizz 1.0.7 SQL Injection
• CVE-2019-257601 PoCJoomla! Component Easy Shop 1.2.3 Local File Inclusion
• CVE-2019-257611 PoCJoomla! Component JoomCRM 1.1.1 SQL Injection via deal_id
• CVE-2019-257621 PoCJoomla! Component JoomProject 1.1.3.2 Information Disclosure
• CVE-2019-257631 PoCWordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass
• CVE-2019-257651 PoCASP-CMS SQL Injection via commentList.asp id Parameter