CVE-2026-92406

CVE-2026-92406 affects SourceCodester Inventory and Monitoring System 1.0 . The vulnerability is a SQL injection in the file /admins/assessments/databank/btn_functions.php?action=add, triggered by manipulating the difficulty_id argument. Remote exploitation is possible without authentication. The...

EUVD-2026-80893

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92405

SourceCodester Inventory and Monitoring System 1.0 is vulnerable to SQL injection via the Username argument in the file /index.php . The vulnerability is remotely exploitable without authentication or user interaction, with a CVSS 3.1 base score of 7.3 (High) reflecting low impact on confidential...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-80891

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-84993 MikroORM: SQL injection via unvalidated order direction in orderBy

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value before AbstractSqlPlatform.getOrderByExpression concatenate...

EUVD-2026-80875

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value before AbstractSqlPlatform.getOrderByExpression concatenate...

CVE-2026-84993 MikroORM: SQL injection via unvalidated order direction in orderBy

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value before AbstractSqlPlatform.getOrderByExpression concatenate...

@adlanarifzr/mikro-orm-migrations (>=7.0.5-next.0, <=7.0.9), @coffer-org/cli (>=1.2.0, <=1.3.5) +14 more potentially affected by CVE-2026-84993 via @mikro-orm/sql (>=7.0.0-rc.0, <=7.1.7-dev.9)

@mikro-orm/sql NPM version =7.0.0-rc.0, =7.0.5-next.0, =1.2.0, =1.2.0, =1.2.0, =7.0.0-rc.0, =7.0.0-rc.0, =7.0.0-rc.0, =7.0.0-rc.0, =7.0.0-rc.0, =7.0.0-rc.0, =7.0.0, =7.0.18-dev.0, =7.0.0-rc.0, =7.0.0-rc.0, =0.61.0, =0.78.0 and more Source cves: CVE-2026-84993 Source advisory: MEND:CVE-2026-84993...

CVE-2026-84993

MikroORM , a TypeScript ORM for Node.js, is vulnerable to SQL injection prior to versions 6.6.16 and 7.1.7 . The root cause lies in the shared SQL layer: while it validates the field key of an orderBy clause, it fails to validate the direction value before AbstractSqlPlatform.getOrderByExpression...

CVE-2026-84993 MikroORM: SQL injection via unvalidated order direction in orderBy

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value before AbstractSqlPlatform.getOrderByExpression concatenate...

Cisco Secure Firewall Management Center Software Vulnerabilities

Multiple vulnerabilities in Cisco Secure Firewall Management Center FMC Software could allow a remote attacker to gain root access, download sensitive files, perform a SQL injection attack, or cause a denial of service DoS condition. For more information about these vulnerabilities, see the Detai...

Cisco Identity Services Engine SQL Injection Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow a remote attacker to conduct SQL injection attacks on an affected device. For more information about these vulnerabilities, see the Details "details" section of this advisory. Cisco has released software updates that addre...

Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct SQL or HQL injection attacks on an affected device. These vulnerabilities are due to insufficient validation of user-supplied...

Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct SQL injections, modify data, or execute arbitrary commands on the underlying operating system on an affected device. For more information about these vulnerabilities, see the...

Cisco Identity Services Engine Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow a remote attacker to bypass authentication to the REST API, achieve remote code execution, perform SQL injection, and conduct XML External Entity injection attacks on an...

CVE-2026-92366

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

CVE-2026-84859

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated directly into the SQL ORDER BY clause without any sanitization or parameterization...

Security Bulletin: The IBM Platform RTM is affected by an SQL injection vulnerability (CVE-2026-17619)

Summary The IBM Platform RTM takes an input in web interface directly for SQL Query, unvalidated value might allow bad actor to insert malicious code into the SQL Query phase. Vulnerability Details CVEID:CVE-2026-17619 DESCRIPTION: IBM Platform RTM is vulnerable to SQL injection. A remote attacke...