13414 matches found
CVE-2025-65022: Improper Neutralization of Special Elements used in an SQL Command
i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the...
CVE-2025-10460: Improper Input Validation
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...
CVE-2025-63718: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...
CVE-2025-64114: Improper Neutralization of Special Elements used in an SQL Command
ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...
CVE-2020-36869: Improper Neutralization of Special Elements used in an SQL Command
Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not properly...
CVE-2025-62422: Improper Neutralization of Special Elements used in an SQL Command
DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in...
CVE-2025-56700: Improper Neutralization of Special Elements used in an SQL Command
Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...
EUVD-2008-0700
Malware in sbrugna...
EUVD-2017-16434
Malware in sbrugna...
EUVD-2014-4855
Malware in sbrugna...
EUVD-2011-5171
Malware in sbrugna...
EUVD-2012-4526
Malware in sbrugna...
EUVD-2012-5272
Malware in sbrugna...
EUVD-2012-4598
Malware in sbrugna...
EUVD-2012-3433
Malware in sbrugna...
EUVD-2010-5003
Malware in sbrugna...
EUVD-2010-5001
Malware in sbrugna...
EUVD-2010-4976
Malware in sbrugna...