CVE-2019-25708

Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery

Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting the networkSetup.htm endpoint with parameters usnm, usps, and cfps to modify the admin username and password without user consent.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Heatmiser Redhat

Products

Heatmiser Wifi Thermostat Wifi Thermostat Thermostat

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute arbitrary code by accessing the uploaded file through the working directory path.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Laravel Filemanager Project Unisharp

Products

Laravel Filemanager Laravel-filemanager

CVE-2019-25655

Device Monitoring Studio 8.10.00.8925 Denial of Service

Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the server connection dialog. Attackers can trigger the crash by entering a malformed server name or address containing repeated characters through the Tools menu Connect to New Server interface.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ctfer Hdd Hhdsoftware

Products

Monitoring Device Monitoring Studio Device Monitoring Studio

CVE-2019-25614

Free Float FTP 1.0 STOR Command Remote Buffer Overflow

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command containing 247 bytes of padding followed by a return address and shellcode to trigger code execution on the FTP server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Freefloat Freefloat Ftp Server Project

Products

Freefloat Ftp Server Freefloat Ftp Server

CVE-2019-25612

Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path

Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare feature by pasting a crafted buffer overflow payload into the left-hand side Folder Path field and clicking the scale icon to execute shellcode with application privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Admin-express Express

Products

Admin-express Express

CVE-2019-25502

Simple Job Script Cross-Site Scripting via job_type_value Parameter

Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim browsers and steal session cookies or perform unauthorized actions.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25501

Simple Job Script SQL Injection via delete_application_ajax.php

Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter. Attackers can send POST requests to delete_application_ajax.php with crafted payloads to extract sensitive data, bypass authentication, or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25500

Simple Job Script SQL Injection via register-recruiters endpoint

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter. Attackers can send POST requests to the register-recruiters endpoint with time-based SQL injection payloads to extract sensitive data or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25499

Simple Job Script SQL Injection via get_job_applications_ajax.php

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter. Attackers can send POST requests to get_job_applications_ajax.php with malicious job_id values to bypass authentication, extract sensitive data, or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25498

Simple Job Script SQL Injection via searched Endpoint

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landing_location parameter. Attackers can send POST requests to the searched endpoint with malicious SQL payloads to bypass authentication and extract sensitive database information.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Niteosoft Simplejobscript

Products

Simple Job Script Simplejobscript

CVE-2019-25479

Inout RealEstate Lastest SQL Injection via agentlistdetails

Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city parameter. Attackers can send POST requests to the agents/agentlistdetails endpoint with malicious SQL payloads in the city parameter to extract sensitive database information.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Inoutscripts Realestate Project

Products

Inout Realestate Realestate

CVE-2019-25434

SpotAuditor 5.3.1.0 Denial of Service via Registration Name Field

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Nsasoft

Products

Nsauditor Spotauditor Spotauditor

CVE-2019-25285

Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the service restarts or the system reboots.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Alps Aviatrix

Products

Pointing-device Controller Controller

CVE-2019-25256

VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers to access arbitrary system files through unvalidated 'ID' parameters. Attackers can exploit multiple Perl scripts like downloadsys.pl to read sensitive files by manipulating directory path traversal in download requests.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Avg

Products

Protection

CVE-2019-25255

VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Avg

Products

Protection

CVE-2019-25233

AVE DOMINAplus 1.10.x Cross-Site Request Forgery and XSS Vulnerabilities

AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to exploit login.php parameters and execute arbitrary scripts in user browser sessions.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Ave

Products

Dominaplus

CVE-2018-25437

WordPress CherryFramework Themes 3.1.4 Backup File Download

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download_backup.php endpoint. Attackers can directly access the download_backup.php script in the admin/data_management directory to obtain ZIP archives containing the entire wp-content/themes directory contents.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Basticom Cherryframework Wordpress

Products

Framework Cherry Framework Themes Wordpress

CVE-2018-25431

No-Cms 1.0 SQL Injection via order_by Parameter

No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate database queries. Attackers can submit POST requests to /nocms/main/manage_privilege/index/export with malicious SQL code in the order_by[0] parameter to extract sensitive database information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Gofrendiasgard No-cms Project

Products

No-cms No-cms

CVE-2018-25396

Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm

Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attackers can request the networkSetup.htm endpoint and extract plaintext username and password values from HTML form fields to gain administrative access to the thermostat.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Heatmiser Redhat

Products

Heatmiser Wifi Thermostat Thermostat

CVE-2018-25377

Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH

Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the Help > Register dialog to trigger a reverse shell with system privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Socusoft

Products

Flash Slideshow Maker