CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-76754

An unauthenticated remote attacker can exploit a vulnerability in an affected interface of ClearPass Policy Manager to perform SQL injection attacks. Successful exploitation allows the attacker to execute arbitrary database commands against the instance. No specific affected versions or remediati...

CVE-2026-61797

CVE-2026-61797 — SQL Injection cieca basata sul tempo nel plugin PDF di GLPI Proof of Concept per CVE-2026-61797 , una vulnerabilità di SQL Injection cieca basata sul tempo che interessa il plugin PDF di GLPI. La vulnerabilità è raggiungibile tramite: /marketplace/pdf/front/preference.form.php...

CVE-2025-57819-exploit

CVE-2025-57819 — Da SQLi Pre-Auth di FreePBX a RCE Un exploit all-in-one per CVE-2025-57819 , un'iniezione SQL non autenticata nel modulo endpoint di FreePBX che porta all'esecuzione remota di codice tramite l'iniezione di job cron. CVSS : 9.8 Critico — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — Kit di Rilevamento e Risposta Risorse di rilevamento, hunting e remediation per CVE-2026-76461 , una vulnerabilità critica di SQL injection in Cisco AsyncOS per Cisco Secure Email Gateway SEG. ⚠️ Disclaimer Questo repository contiene esclusivamente contenuti difensivi : regole...

CVE-2020-7471

CVE-2020-7471 Iniezione SQL tramite input del delimitatore StringAgg Configurazione: Esegui ./setup.sh per la configurazione iniziale Apri l'immagine docker per avviare il database: docker exec -it containerid /bin/bash Ed esegui i seguenti comandi: python manage.py makemigrations vulapp python...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105856

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2019-9053-exploit

CVE-2019-9053 — SQL Injection non autenticata in CMS Made Simple Descrizione CVE-2019-9053 è una vulnerabilità di iniezione SQL time-based blind che colpisce CMS Made Simple nelle versioni ≤ 2.2.9. Non richiede autenticazione. Il parametro vulnerabile è m1idlist nel modulo News moduleinterface.ph...

WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Theme Traveler versions = 3.2.9...

loxs-optimized

loxs-optimized Progetto da https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Nota: bypassa principalmente il payload CSP 2024-11-06 Aggiunto CSP-Bypass-xss.txt a xss.txt 2024-11-07 Rimozione delle informazioni interferenti Vengono mostrate solo le informazioni vulnerabili 2024-11-11 Risolve il...

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — Laboratorio SQL Injection di Secondo Ordine EverShop Prerequisiti Docker Engine 24+ con Docker Compose v2+ 2 GB di RAM libera Distribuzione cd EverShop-Lab/ docker compose up Attendi circa 2 minuti per la prima build clona EverShop v2.1.0, compila, esegue le migrazioni, carica i...

cve-2025-1323

cve-2025-1323 Iniezione SQL nel plugin WP-Recall ⚠️ Avvertenze legali Questo strumento è destinato esclusivamente a test di sicurezza autorizzati e uso educativo. Non utilizzare su sistemi senza autorizzazione esplicita. L'uso improprio potrebbe essere illegale. ✅ Requisiti Python 3.x Modulo...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2026-105856

The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2026-105845

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

cs4239-cve-2020-15873

CVE-2020-15873 Prova di concetto di CVE-2020-15873 - SQL Injection cieca in Librenms librenms librenms Sviluppo Debug dell'istanza Docker di LibreNMS 1. Ottieni una shell nel container: $ sudo docker exec -it librenmsvuln /bin/bash 2. Per leggere i log generati da LibreNMS: $ tail -f...

Payload: SQL Injection in SQLite and Postgres

Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...