Lucene search
+L

219622 matches found

Positive Technologies
Positive Technologies
added 2 days ago2 views

PT-2026-71708

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

8.8CVSS6.2AI score0.00689EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71908

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE QUERY steps. Attackers can POST attacker-controlled JSON to the webhook trigger endpoint to inject SQL payloads that execute with builder-configured database credentials,...

10CVSS5.7AI score0.00286EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71511

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

9.3CVSS5.7AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71506

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

9.3CVSS5.7AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71507

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...

8.5CVSS5.5AI score0.0026EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71501

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

7.5CVSS5.7AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago3 views

PT-2026-71520

Subscriber SQL Injection in CubeWP = 1.1.30 versions...

8.5CVSS5.7AI score0.00342EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago3 views

Linux Distros Unpatched Vulnerability : CVE-2026-15741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect...

8.8CVSS6.4AI score0.00408EPSS
SaveExploits0References3
PostrgeSql
PostrgeSql
added 2 days ago7 views

Vulnerability in client (CVE-2026-6464)

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fai...

8.1CVSS5.7AI score0.00492EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 3 days ago20 views

Exploit for SQL Injection in Dovecot

CVE-2026-24031: Dovecot SQL authentication bypass authenticat...

8.2CVSS6AI score0.00395EPSS
SaveExploits1
Cvelist
Cvelist
added 3 days ago29 views

CVE-2026-10543 IBM® Db2® is vulnerable to privilege escalation with a specially crafted query

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...

8.2CVSS0.00321EPSS
SaveExploits0References1
NVD
NVD
added 3 days ago6 views

CVE-2026-73329

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter during draft creation. Attackers can submit a maliciou...

9.2CVSS0.00229EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago7 views

CVE-2026-73331

CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates as part of an inadequately parameterized query. Attackers c...

7.1CVSS0.00264EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago7 views

CVE-2026-73332

CamaleonCMS contains a stored cross-site scripting vulnerability in the camacontactform plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the beforehtml field through the contact form edit endpoint, which lacks proper...

9.2CVSS0.00229EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago7 views

CVE-2026-72807

SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or...

8.8CVSS0.00199EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago8 views

CVE-2026-67579

Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read actions with keyset pagination decode the...

7.5CVSS0.00387EPSS
SaveExploits0References4
NVD
NVD
added 3 days ago7 views

CVE-2026-17111

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

7.6CVSS0.00219EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago10 views

CVE-2026-67579

Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read actions with keyset pagination decode the...

7.5CVSS6.2AI score0.00387EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 3 days ago4 views

CVE-2026-67579 Filter expression injection via forged keyset pagination cursor in Ash

Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read actions with keyset pagination decode the...

7.5CVSS6.2AI score0.00387EPSS
SaveExploits0References9
Cvelist
Cvelist
added 3 days ago28 views

CVE-2026-67579 Filter expression injection via forged keyset pagination cursor in Ash

Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read actions with keyset pagination decode the...

7.5CVSS0.00387EPSS
SaveExploits0References4
Rows per page
Query Builder