Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks. Attackers can directly request the kim.db database file to retrieve user credentials and password hashes, or inject SQL code through the menu endpoint to manipulate database queries.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-06 | 1 | General1 |
| 2026-03-07 | 1 | Disclosure1 |
CVE Alert: CVE-2018-25187 - Tina4 - Tina4 Stack - https://www.redpacketsecurity.com/cve-alert-cve-2018-25187-tina4-tina4-stack/ #OSINT #ThreatIntel #CyberSecurity #cve-2018-25187 #tina4 #tina4-stack
Post summary
The text announces a CVE alert for CVE-2018-25187 and provides a link to a security site, but offers no further technical detail.
CVE-2018-25187 Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks. Attackers… https://www.cve.org/CVERecord?id=CVE-2018-25187
Post summary
The message supplies general information on CVE-2018-25187, highlighting unauthenticated database file access and SQL injection possibilities, without indicating PoCs, active exploits, or fixes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tina4 | tina4_stack | 1.0.3 | - | - |