Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

283581 matches found

GithubExploit
GithubExploit•added 2026/09/20 6:59 p.m.•39 views

Exploit for CVE-2026-88854

CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...

9.3CVSS5.8AI score0.00386EPSS
SaveExploits1
NVD
NVD•added 2026/09/20 6:16 p.m.•22 views

CVE-2026-94041

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality of the file admin/addmenu.php. The manipulation of the argument item/price/image/type leads to sql injection. It is...

6.5CVSS0.00333EPSS
SaveExploits0References6
NVD
NVD•added 2026/09/20 6:16 p.m.•14 views

CVE-2026-94042

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

6.5CVSS0.00316EPSS
SaveExploits0References5
NVD
NVD•added 2026/09/20 6:16 p.m.•23 views

CVE-2026-88855

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS0.00369EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/20 6:16 p.m.•25 views

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS0.00386EPSS
SaveExploits1References1
CVE
CVE•added 2026/09/20 5:53 p.m.•73 views

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References1
Cvelist
Cvelist•added 2026/09/20 5:53 p.m.•70 views

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS0.00386EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment•added 2026/09/20 5:53 p.m.•18 views

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References1
EUVD
EUVD•added 2026/09/20 5:53 p.m.•20 views

EUVD-2026-83767

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References1
Cvelist
Cvelist•added 2026/09/20 5:50 p.m.•55 views

CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/20 5:50 p.m.•22 views

CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/20 5:50 p.m.•48 views

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/20 5:50 p.m.•19 views

EUVD-2026-83766

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/20 5:45 p.m.•16 views

EUVD-2026-83764

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

6.5CVSS6.2AI score0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2026/09/20 5:45 p.m.•11 views

CVE-2026-94042 AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

6.5CVSS6.2AI score0.00316EPSS
SaveExploits0References5
osv_cve
osv_cve•added 2026/09/20 5:45 p.m.•7 views

CVE-2026-94042 AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

5.3CVSS5.4AI score
SaveExploits0References7
Cvelist
Cvelist•added 2026/09/20 5:45 p.m.•43 views

CVE-2026-94042 AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

6.5CVSS0.00316EPSS
SaveExploits0References5
CVE
CVE•added 2026/09/20 5:45 p.m.•30 views

CVE-2026-94042

CVE-2026-94042 is a SQL injection vulnerability in the AdithyaYelloju Restaurant Management System (affects the mysqli_query function in admin/add_table.php ). The unvalidated parameters table , members , and price can be manipulated remotely by an authenticated low-privilege user to inject arbit...

6.5CVSS6.2AI score0.00316EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/09/20 5:15 p.m.•50 views

CVE-2026-94041 AdithyaYelloju Restaurant-Management-System add_menu.php sql injection

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality of the file admin/addmenu.php. The manipulation of the argument item/price/image/type leads to sql injection. It is...

6.5CVSS0.00333EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/09/20 5:15 p.m.•17 views

EUVD-2026-83760

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality of the file admin/addmenu.php. The manipulation of the argument item/price/image/type leads to sql injection. It is...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
Rows per page
Query Builder