260504 matches found
CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection
CVE-2025-67644 PoC – Injeção SQL no Checkpoint SQLite do LangGraph CVE-2025-67644 é uma vulnerabilidade de Injeção SQL CWE-89 no pacote langgraph-checkpoint-sqlite parte do ecossistema LangGraph / LangChain. Permite que um atacante injete SQL arbitrário através de chaves de filtro de metadados nã...
CVE-2026-76270
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...
CVE-2025-65354
CVE-2025-65354 — SQL इंजेक्शन भेद्यता सारांश PuneethReddyHC event-management एप्लिकेशन संस्करण 1.0 में अनुचित इनपुट हैंडलिंग के कारण एक SQL इंजेक्शन भेद्यता मौजूद है। भेद्यता प्रकार SQL इंजेक्शन प्रभावित घटक एंडपॉइंट: /Grocery/searchproductsitname.php पैरामीटर: sitemname POST हमले का प्रकार दूरस्...
EUVD-2026-94622
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...
CVE-2026-76270
Splunk Enterprise and Splunk Cloud Platform versions below 10.4.3 (excluding 10.2.x, 10.0.x, and 9.4.x) are vulnerable to an SQL Injection in the SPL2 module filtering functionality. A user with the list_spl2_modules capability can exploit the lack of parameterized user-supplied values in databas...
CVE-2026-76270 Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...
GHSA-PJ7X-6WPF-PGVP Payload: SQL injection in SQLite/Postgres
Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...
Payload: SQL injection in SQLite/Postgres
Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...
EUVD-2026-93500
Payload: SQL injection in SQLite/Postgres...
Exploit for CVE-2026-102782
CVE-2026-102782 — OrdaSoft Simple Membership unauth SQLi Pyth...
CVE-2025-50565
CVE-2025-50565 विवरण Doubo ERP 1.0 में SQL इंजेक्शन भेद्यता है, जो उपयोगकर्ता इनपुट की फ़िल्टरिंग की कमी के कारण है, जिसे एक हमलावर द्वारा दूरस्थ रूप से शुरू किया जा सकता है। भेद्यता प्रकार SQL इंजेक्शन हमले का प्रकार दूरस्थ प्रभाव सूचना प्रकटीकरण true क्या विक्रेता ने पुष्टि की है true खोजकर्ता...
CMS-Made-Simple-2.2.9-CVE-2019-9053
Isenção de Responsabilidade Este repositório fornece um exploit compatível com Python 3 direcionado a uma vulnerabilidade de injeção SQL não autenticada no CMS Made Simple versões 2.2.9 e anteriores. A falha, rastreada como CVE-2019-9053, permite que atacantes extraiam dados sensíveis do...
CVE-2026-95605
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...
CVE-2026-62251
Homer is open source telecom observability software. Prior to version 11.0.283, the V4StatisticsQuery handler passes the user-supplied rawquery field directly to DuckDB without calling the sqlvalidator.ValidateRawSQL function used throughout the rest of the codebase. Any authenticated user can...
CVE-2026-76452
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient...
EUVD-2026-94490
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...
CVE-2026-95605
The Passionate Programmer Peter WP Data Access WordPress plugin is vulnerable to Blind SQL Injection in versions up to and including 5.5.82 . The root cause is the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). This vulnerability could allow an attacker to perform un...
CVE-2026-95605 WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...
CVE-2026-95605 WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...