94272 matches found
CVE-2026-79798
The ClearPass Policy Manager web-based management interface contains SQL injection vulnerabilities that can be exploited by a low-privileged authenticated remote attacker. Successful exploitation allows the attacker to execute arbitrary database commands against the ClearPass Policy Manager insta...
CVE-2026-79794
The ClearPass Policy Manager web-based management interface contains a SQL injection vulnerability . This flaw allows an authenticated remote attacker to perform SQL injection attacks against the ClearPass Policy Manager instance. If successfully exploited, an attacker could execute arbitrary dat...
CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...
CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...
EUVD-2026-93882
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...
CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...
EUVD-2026-93881
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...
CVE-2023-49440
CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...
cve-2026-9082
CVE-2026-9082 Tipo : SQL Injection CWE-89 Prodotto interessato : Drupal Core API di astrazione del database Avviso Drupal : SA-CORE-2026-004 Pubblicato : 20 maggio 2026 Gravità : Altamente Critica Drupal 20/25 | NVD CVSS 6.5 Cos'è? CVE-2026-9082 è una vulnerabilità di SQL Injection nell'API di...
CVE-2019-9193
EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in certain versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server vulnerable to CVE-2019-9193. Features...
CVE-2026-39492
CVE-2026-39492 — Scansione SQL Injection Cieca su WP Maps SQLi Cieca Time-Based pre-autenticazione con bypass backtick → Estrazione DB Panoramica CVE-2026-39492 è una vulnerabilità critica CVSS 9.3 di SQL injection cieca non autenticata nel plugin WP Maps wp-google-map-plugin versioni ≤ 4.9.1. Il...
CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...
CVE-2026-105834
Rundeck versions before 6.2.0 are vulnerable to a path traversal vulnerability in the File Resource Model Source . This flaw allows users with only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to an absolute path. Attackers can exploit this vi...
EUVD-2026-93378
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...
BIT-APACHE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow
Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...
gryph
KI-Coding-Agents haben keine Sicherheitsgrenzen. Gryph baut eine. Alle nutzen den YOLO-Modus. Gryph erzwingt Leitplanken und führt das Audit-Trail. Schnellstart · Demo · Unterstützte Agents · Anwendungsfälle · Sicherheitsrichtlinie KI-Coding-Agents Claude Code, Cursor, Windsurf, Gemini CLI,...
CVE-2026-4889
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
CVE-2026-39731
Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...