260409 matches found
CVE-2026-102782
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2026-107103
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
codeql-workshop-cve-2021-21380
ورشة CodeQL لجافا: إيجاد حقن SQL في هذه الورشة سنستخدم التفكير النحوي والدلالي لإيجاد حقن SQL في مكون التقييم الخاص بمنصة XWiki الموثقة في CVE-2021-21380 المحتويات ورشة CodeQL لجافا: إيجاد حقن SQL المحتويات المتطلبات الأساسية وتعليمات الإعداد على جهازك المحلي التثبيت خطوات الإعداد الورشة ما ستتعل...
CVE-2024-8465-PoC
CVE-2024-8465 – إثبات مفهوم حقن SQL معلومات الفريق اسم الفريق: The Misfits أعضاء الفريق: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi نظرة عامة يحتوي هذا المستودع على تطبيق ويب ضعيف تم إنشاؤه كإثبات مفهوم PoC لتوضيح ثغرة حقن SQL مستوحاة من CVE-2024-8465. التطبيق غير آم...
CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
EUVD-2026-94218
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
CVE-2026-107103
A SQL Injection vulnerability exists in the Manacle Technologies ERP System due to insufficient validation and parameterization of user-supplied input in an API endpoint . An unauthenticated remote attacker can exploit this by providing specially crafted input to the vulnerable endpoint. Successf...
security-log-analyzer
🛡️ Security Log Analyzer A fast, dependency-light Python CL...
EUVD-2026-94216
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2026-102782
The OrdaSoft Simple Membership Joomla extension (versions
CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2025-25257
اختبار ثغرة CVE-2025-25257 في Fortinet FortiWeb الوصف تم تصميم هذا السكربت PowerShell لأغراض اختبار الاختراق المصرح به فقط. يختبر أجهزة Fortinet FortiWeb بحثًا عن CVE-2025-25257، وهي ثغرة حقن SQL غير مصادق عليها في نقطة النهاية /api/fabric/device/status. يقوم السكربت بما يلي: يتجاهل أخطاء شهادات...
CVE-2026-104667
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
CVE-2026-104953
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
gogs
gogs هنا سنقوم بإعداد مختبرنا على جهاز SEED Ubuntu 16.04 الافتراضي، وعلينا أولاً تثبيت خدمة Go Git Service GOGS على جهازنا الافتراضي قبل الانتقال إلى استغلال ثغرة حقن SQL. لإعداد الجهاز الافتراضي، إليك الخطوات: الخطوة 1: تثبيت قاعدة البيانات بمجرد تسجيل الدخول إلى النظام، يجب تشغيل الأمر التالي...
CVE-2023-27742
CVE-2023-27742 تم اكتشاف أن IDURAR ERP/CRM v1 يحتوي على ثغرة حقن SQL عبر المكوّن /api/login. الوصف تم اكتشاف أن IDURAR ERP/CRM v1 يحتوي على ثغرة حقن SQL عبر المكوّن /api/login. نوع الثغرة حقن SQL مورّد المنتج IDURAR ERP/CRM v1 قاعدة الكود للمنتج المتأثر https://github.com/idurar/erp-crm - الإصدار...
EUVD-2026-94184
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
CVE-2026-104953
The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...