ColorOS-CVE-2025-10184

Information Source Vulnerability Principle & Solution Technical Analysis Vulnerability Details Type: Database injection attack 1=1 AND Impact: Any app can read SMS data. No permissions required, no user interaction, undetectable reading Affected: All SMS messages and verification codes on the...

CVE-2026-24417

CVE-2026-24417: OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service Overview Field| Details ---|--- CVE ID| CVE-2026-24417 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: 2.9.8 CWE...

CVE-2026-30655

CVE-2026-30655 — SQL Injection in esiclivre password reset Summary A SQL injection vulnerability exists in the password reset endpoint of esiclivre. An unauthenticated attacker can inject SQL via the cpfcnpj POST parameter, potentially resulting in unauthorized access to sensitive information...

CVE-2025-11177

Trigger the SQLi with a time-based payload in the public login curl -w '\nTIME:%timetotal\n' -s \ -d 'log=anything%27%3B%20SELECT%20pgsleep5%3B%20--&pwd=irrelevant&wp-submit=Log+In' \ -d 'redirectto=' \ -d 'testcookie=1' \ 'http://target/wp-login.php'...

CVE-2026-25513

CVE-2026-25513: FacturaScripts has SQL Injection in API ORDER BY Clause Overview Field| Details ---|--- CVE ID| CVE-2026-25513 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products facturascripts/facturascripts versions: 2025.81 CWE Classification CWE-20: Improper...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

com.hazelcast:hazelcast-build-utils (4.1.7), com.hazelcast:hazelcast-spring (4.1.7) +2 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.7)

com.hazelcast:hazelcast MAVEN version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.7 - com.hazelcast:hazelcast-spring 4.1.7 - com.hazelcast:hazelcast-sql...

com.hazelcast:hazelcast-build-utils (4.1.3), com.hazelcast:hazelcast-spring (4.1.3) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.3)

com.hazelcast:hazelcast MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.3 - com.hazelcast:hazelcast-spring 4.1.3 - com.hazelcast:hazelcast-sql...

cn.spider-node:client (>=1.0.2, <=1.0.2.2), cn.spider-node:linker-client (>=1.0.2, <=1.0.3) +28 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2.8)

com.hazelcast:hazelcast MAVEN version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.spider-node:client =1.0.2, =1.0.2, =1.3.0, =0.23.0, =0.23.0, =4.4.3, =4.4.3, =4.4.3, =3.5.7, =3.5.11 and more...

com.efluid.oss:efluid-datagate-app (>=3.1.22, <=5.1.6), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.22, <=5.1.6) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.5)

com.hazelcast:hazelcast MAVEN version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =3.1.22, =3.1.22, =2.5.1, =3.11.2, =3.13.0 Source cves: CVE-2026-107725 Source...

com.hazelcast:hazelcast-build-utils (4.1-beta-1), com.hazelcast:hazelcast-spring (4.1-beta-1) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1-beta-1)

com.hazelcast:hazelcast MAVEN version 4.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1-beta-1 - com.hazelcast:hazelcast-spring 4.1-beta-1 -...

com.hazelcast:hazelcast-build-utils (4.2-beta-1), com.hazelcast:hazelcast-spring (4.2-beta-1) +2 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2-beta-1)

com.hazelcast:hazelcast MAVEN version 4.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2-beta-1 - com.hazelcast:hazelcast-spring 4.2-beta-1 -...

com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2.6)

com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...

com.hazelcast:hazelcast-build-utils (4.1.6), com.hazelcast:hazelcast-spring (4.1.6) +3 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.6)

com.hazelcast:hazelcast MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.6 - com.hazelcast:hazelcast-spring 4.1.6 - com.hazelcast:hazelcast-sql...

CVE-2025-71428

Versions of Jivejdon through 5.0 are vulnerable to a SQL injection flaw in the AccountDaoSql.getAccountByNameLike() method. Authenticated users with the Admin role can exploit this by submitting crafted input to the /admin/user/userListAction endpoint via the username parameter . Successful explo...

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...