272452 matches found
CVE-2026-105918
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
hakuin
Hakuin es un marco de optimización y automatización de Inyección SQL Ciega BSQLI escrito en Python 3. Abstracta la lógica de extracción y permite a los usuarios volcar bases de datos de aplicaciones web vulnerables de manera fácil y eficiente. Para acelerar el proceso, Hakuin utiliza una variedad...
hakuin
Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...
CVE-2026-41490
CVE-2026-41490 — SQL Injection in Dagster database I/O managers via dynamic partition keys Severity : High CVSS 8.3 CWE : CWE-89 — SQL Injection Affected : Dagster core = 1.13.0 and integration packages = 0.29.0 Fixed in : Dagster core 1.13.1 and integration packages 0.29.1 Advisory :...
CVE-2024-1071-SQL-Injection
Proof of concept CVE-2024-1071: WordPress Vulnerability Exploited Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all...
CVE-2024-10140
CVE-2024-10140 El script explota una vulnerabilidad de inyección SQL encontrada en el endpoint /php/managesupplier.php?action=delete&id=32. La vulnerabilidad permite a un atacante inyectar comandos SQL arbitrarios a través del parámetro id, comprometiendo potencialmente la base de datos y...
ko7demo
A docker-contained https://github.com/koseven/kosevenkoseven hello world to play with CVE-2019-8979, a SQL injection vulnerability affecting versions 3.3.10. This hello world actually comes from the https://koseven.dev/documentation/orm/examples/simpledocumentation, I just added the Docker parts...
CVE-2026-63030-POC
wp2shell — CVE-2026-63030 + CVE-2026-60137 One-day WordPress RCE exploit chain. Unauthenticated. CVSS 9.8. Zero dependencies — Python 3.8+ stdlib only. Affected Versions Branch| Vulnerable| Patched ---|---|--- 6.9.x| 6.9.0 – 6.9.4| ≥ 6.9.5 7.0.x| 7.0.0 – 7.0.1| ≥ 7.0.2 The Chain Two CVEs chained...
EUVD-2026-93372
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
CVE-2026-105918
A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7
New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9
New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8
New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-49048-JoomCCK-SQLi
CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection CVSS 9.8 CVE: CVE-2026-49048 Status: Public disclosure. Reported to Joomla Security Strike Team JSST — Ticket 282420. Advisory Summary Field| Value ---|--- Advisory ID| JOOMCCK-2026-001 CVE| CVE-2026-49048 Product| JoomCCK comjoomcck —...
CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit
CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-with-Bug-Fixes The exploit has been fixed to support Python 3 CVE-2019-9053 Original exploit source: https://www.exploit-db.com/exploits/46635 Possible error and its fix Traceback most recent call last: File "46635.py", line 12, in from termcolor...
patch-CVE-2026-03200
Patch: CVE-2026-03200 Vulnerability Details CVE : CVE-2026-03200 Product : Progress MOVEit Description : SQL injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-15 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...