Aruba ClearPass Policy Manager 6.11.x < 6.11.16 / 6.14.x < 6.14.1 Multiple Vulnerabilities (HPESBNW05158)

The version of Aruba ClearPass Policy Manager installed on the remote host is 6.11.x prior to 6.11.16, or 6.14.x prior to 6.14.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HPESBNW05158 advisory. - Deserialization of untrusted data vulnerabilities exist in the web...

CVE-2026-67401

CVE-2026-67401 — Injection SQL dans cPanel/WHM EmailTrack → RCE en root Preuve de concept pour CVE-2026-67401 , une vulnérabilité critique d'injection SQL dans la fonctionnalité EmailTrack de cPanel & WHM qui permet à un utilisateur authentifié disposant de privilèges liés au courrier d'écrire de...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – حقن SQL في نقاط تحقق SQLite الخاصة بـ LangGraph CVE-2025-67644 هي ثغرة حقن SQL CWE-89 في حزمة langgraph-checkpoint-sqlite جزء من النظام البيئي LangGraph / LangChain. تتيح للمهاجم حقن SQL اعتباطي عبر مفاتيح مرشح البيانات الوصفية غير المعقَّمة التي تُمرَّر إلى طريقتي list / ali...

CVE-2026-76270

In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...

CVE-2026-107352

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata AWS account identifiers and SQL statement text from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS...

CVE-2025-65354

CVE-2025-65354 — ثغرة حقن SQL الملخص توجد ثغرة حقن SQL في تطبيق إدارة الأحداث PuneethReddyHC الإصدار 1.0 بسبب معالجة غير صحيحة للمدخلات. نوع الثغرة حقن SQL المكون المتأثر Endpoint: /Grocery/searchproductsitname.php المعامل: sitemname POST نوع الهجوم عن بُعد التأثير يمكن لمهاجم عن بُعد غير مصادق...

CVE-2026-76270

Splunk Enterprise and Splunk Cloud Platform versions below 10.4.3 (excluding 10.2.x, 10.0.x, and 9.4.x) are vulnerable to an SQL Injection in the SPL2 module filtering functionality. A user with the list_spl2_modules capability can exploit the lack of parameterized user-supplied values in databas...

CVE-2026-76270 Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...

EUVD-2026-94622

In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...

Payload: SQL injection in SQLite/Postgres

Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...

EUVD-2026-93500

Payload: SQL injection in SQLite/Postgres...

GHSA-PJ7X-6WPF-PGVP Payload: SQL injection in SQLite/Postgres

Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...

Exploit for CVE-2026-102782

CVE-2026-102782 — OrdaSoft Simple Membership unauth SQLi Pyth...

CVE-2025-50565

CVE-2025-50565 الوصف يحتوي Doubo ERP 1.0 على ثغرة حقن SQL بسبب عدم تصفية مدخلات المستخدم، والتي يمكن أن يبدأها مهاجم عن بُعد. نوع الثغرة حقن SQL نوع الهجوم عن بُعد تأثير كشف المعلومات true هل أكد البائع true المكتشف https://www.jump.net.cn المرجع https://www.jump.net.cn https://v12.icu قاعدة كود...

CMS-Made-Simple-2.2.9-CVE-2019-9053

إخلاء مسؤولية يوفر هذا المستودع استغلالًا متوافقًا مع Python 3 يستهدف ثغرة حقن SQL غير مصادق عليها في إصدارات CMS Made Simple 2.2.9 والإصدارات الأقدم. الثغرة، التي تُتبع باسم CVE-2019-9053، تسمح للمهاجمين باستخراج بيانات المسؤول الحساسة، بما في ذلك اسم المستخدم، وكلمة المرور المشفرة، والبريد...

CVE-2026-95605

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...

CVE-2026-62251

Homer is open source telecom observability software. Prior to version 11.0.283, the V4StatisticsQuery handler passes the user-supplied rawquery field directly to DuckDB without calling the sqlvalidator.ValidateRawSQL function used throughout the rest of the codebase. Any authenticated user can...

CVE-2026-76452

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient...

CVE-2026-95605

The Passionate Programmer Peter WP Data Access WordPress plugin is vulnerable to Blind SQL Injection in versions up to and including 5.5.82 . The root cause is the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). This vulnerability could allow an attacker to perform un...

EUVD-2026-94490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...