Hasura GraphQL Engine - Remote Code Execution Detection

Hasura GraphQL Engine allows remote unauthenticated users to execute arbitrary SQL statements via the '/v2/query' endpoint aka remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Hasura GraphQL Engine allows remote unauthenticated users to execute arbitrary SQL statements via the...

CVE-2026-6628

A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query/view/ of the component Query Viewer Component. This manipulation of the argument custom causes sql injection. The attack can be initiated remotely. The exploit has been publish...