CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

CVE-2026-81932

IBM Guardium Data Protection versions 12.0 , 12.1 , and 12.2 are vulnerable to an SQL injection (CWE-89) within the Sniffer component . A remote unauthenticated attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. To remediate ...

CVE-2026-16830

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager के आर्टिकल मूल्य निर्धारण मॉड्यूल में Time-Based Blind SQL Injection अवलोकन फ़ील्ड| विवरण ---|--- CVE ID| CVE-2026-24416 गंभीरता| HIGH सलाह| सलाह देखें खोजकर्ता| Lukasz Rybak प्रभावित उत्पाद devcode-it/openstamanager संस्करण: = 2.9.8 CWE वर्गीकरण CWE-89: SQL कमांड म...

EUVD-2026-95281

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-16830

An SQL injection vulnerability (CWE-89 ) exists in IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3). A remote authenticated attacker could exploit this flaw to modify data and trigger a denial of service . To remediate, IBM ...

CVE-2026-16830 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - URL पथ के माध्यम से बिना प्रमाणीकरण के SQL इंजेक्शन विवरण WordPress के लिए Ally – Web Accessibility & Usability प्लगइन, संस्करण 4.0.3 तक 4.0.3 सहित के सभी संस्करणों में URL पथ के माध्यम से SQL इंजेक्शन के प्रति संवेदनशील है। इसका कारण...

CVE-2026-78070

plgcontentdpcalendar में ORDER BY शॉर्टकोड के माध्यम से SQL इंजेक्शन DPCalendar Free ≤ 10.11.2 — लेखक-स्तर का उपयोगकर्ता टाइम-आधारित ब्लाइंड इंजेक्शन के माध्यम से पूरा डेटाबेस निकालता है सारांश plgcontentdpcalendar कंटेंट प्लगइन Joomla आर्टिकल बॉडी में एम्बेडेड events order="..."/events शॉर्टकोड ...

CVE-2026-24419

CVE-2026-24419: حقن SQL في وحدة Prima Nota في OpenSTAManager نظرة عامة الحقل| التفاصيل ---|--- معرف CVE| CVE-2026-24419 الخطورة| عالية النشرة الأمنية| عرض النشرة اكتُشف بواسطة| Lukasz Rybak المنتجات المتأثرة devcode-it/openstamanager الإصدارات: = 2.9.8 تصنيف CWE CWE-89: عدم التعامل السليم مع...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - OpenEMR कमज़ोरी CWE-89 SQL कमांड 'SQL इंजेक्शन' में प्रयुक्त विशेष तत्वों का अनुचित निष्प्रभावीकरण यह उत्पाद किसी अपस्ट्रीम घटक से बाह्य-प्रभावित इनपुट का उपयोग करके SQL कमांड का पूरा या आंशिक निर्माण करता है, लेकिन जब इसे डाउनस्ट्रीम घटक को भेजा जाता है तो यह उन विशेष तत्वों को...

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Scripts em Python para exploração de CVE-2024-51482 SQLi no ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Descrição Este script automatiza a extração de bases de dados, tabelas, colunas e credenciais aproveitando CVE-2024-51482, uma vulnerabilidade de...

CVE-2025-10351-POC

CVE-2025-10351 POC - SQL-Injection-Exploit 💉 POC für CVE-2025-10351: Eine nicht authentifizierte SQL-Injection-Schwachstelle, die einen bestimmten Endpunkt im Melis Platform Framework betrifft. 🔗 Referenzen 📄 CVE-2025-10351 auf MITRE 📄 Melis Platform Warnung auf INCIBE Spanisches Nationales...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-82896 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability...

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...

GHSA-R3RV-JM3R-62Q2 MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NOBACKSLASHESCAPES vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.5...

GHSA-V6PJ-GXXW-PHFW MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

Description With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause, each key becoming a column name. The three code paths implementing that expansion built the backtick-quoted identifier by hand and wrote the key out...

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

Description With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause, each key becoming a column name. The three code paths implementing that expansion built the backtick-quoted identifier by hand and wrote the key out...

NPM: MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

NPM: MariaDB Connector/Node.js: SQL injection through object keys in SET expansion permitSetMultiParamEntries vulnerability discovered by ? in WordPress Npm mariadb versions = 3.2.0, 3.2.5...