282339 matches found
Web-App-PenTesting
--- ๐ Quick Start 1. Clone the repository bash git c...
Exploit for SQL Injection in Google Android
CVE-2026-28576 Red Team Tool Zero-permission contacts exfil...
CVE-2024-2876
CVE-2024-2876 ์ทจ์ฝ์ ์ค๋ช : WordPress์ฉ Email Subscribers by Icegram Express โ Email Marketing, Newsletters, Automation for WordPress & WooCommerce ํ๋ฌ๊ทธ์ธ์ ์ฌ์ฉ์๊ฐ ์ ๊ณตํ ๋งค๊ฐ๋ณ์์ ๋ํ ์ด์ค์ผ์ดํ ์ฒ๋ฆฌ ๋ถ์กฑ๊ณผ ๊ธฐ์กด SQL ์ฟผ๋ฆฌ์ ๋ํ ์ถฉ๋ถํ ์ค๋นpreparation ๋ถ์กฑ์ผ๋ก ์ธํด 5.7.14๋ฅผ ํฌํจํ ๋ชจ๋ ๋ฒ์ ์์ โIGESSubscribersQueryโ ํด๋์ค์ โrunโ ํจ์๋ฅผ ํตํ SQL ์ธ์ ์ ์ ์ทจ์ฝํฉ๋๋ค. ์ด๋ก...
CVE-2026-94491
A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/searchlist.jsp. Executing a manipulation of the argument address can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and cou...
CVE-2026-94492
A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attack can be initiated remotely. The explo...
EUVD-2026-84243
Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...
CVE-2026-94492 Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection
A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2026-94492 Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection
A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attack can be initiated remotely. The explo...
EUVD-2026-84254
A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2026-94492
A SQL injection vulnerability exists in Yonyou U8cloud 5.x , specifically in the OpenAPI component at the endpoint /u8cloud/openapi/so.saleorder.sendaudit. Manipulation of the operator argument allows a remote attacker with low privileges to inject SQL, leading to low impact on confidentiality, i...
CVE-2026-94491 Yonyou KSOA search_list.jsp sql injection
A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/searchlist.jsp. Executing a manipulation of the argument address can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and cou...
CVE-2026-94491
Yonyou KSOA 9.0 contains a SQL injection vulnerability in the file /cardcase/search_list.jsp , triggered by manipulating the address argument. The attack can be launched remotely without authentication (CVSS 3.1 score: 7.3 , HIGH). The vendor was contacted but did not respond , and no official pa...
CVE-2026-94491 Yonyou KSOA search_list.jsp sql injection
A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/searchlist.jsp. Executing a manipulation of the argument address can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and cou...
EUVD-2026-84252
A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/searchlist.jsp. Executing a manipulation of the argument address can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and cou...
EUVD-2026-84810
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint GET /ms/mdiy/page/verify.do...
ROS-20260922-73-0135
The vulnerability in postgresqlanonymizer17 is related to the failure to implement proper protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
PT-2026-97110
Name of the Vulnerable Software and Affected Versions ReactPress versions prior to 3.7.0 Description API list endpoints build TypeORM QueryBuilder conditions using unsanitized HTTP query parameter names as SQL column identifiers. Because TypeORM parameterizes values but not column names,...
PT-2026-97031
Name of the Vulnerable Software and Affected Versions MCMS versions 6.1.1 through 6.2.1 Description A SQL injection issue exists within the custom model/form import feature. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially...