9373 matches found
CVE-2026-63030
CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit CVE-2026-63030 wp2shell भेद्यता के माध्यम से उपयोगकर्ताओं और पासवर्ड हैश को निकालने के लिए प्रूफ ऑफ कॉन्सेप्ट उपकरण। भेद्यता जानकारी CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 प्रकार : Pre-Auth...
CVE-2025-48932-Invision-Community-SQLi-Exploit
🔓 CVE-2025-48932 - استغلال حقن SQL في Invision Community ⚡ نظرة عامة على الثغرة الحرجة CVE-2025-48932 هي ثغرة حقن SQL أعمى حرجة بدون مصادقة تم اكتشافها في Invision Community الإصدارات ≤ 4.7.20. يسمح هذا الاستغلال للمهاجمين عن بُعد بما يلي: 🔍 استخراج معلومات حساسة من قاعدة البيانات 👤 سرقة بيانات...
CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection
CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection CVE-2025-7404 का शोषण।...
CVE-2025-45346
CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreSQL Version Extraction 📝 Overview Vulnerability Title : Time-Based Blind SQL Injection in Bacula-Web Product : Bacula-Web Versions Affected : Confirmed in versions supporting PostgreSQL backend CVE ID : CVE-2025-45346 Severity : High...
CVE-2023-48084
CVE-2023-48084 CVE-2023-48084 के लिए पायथन एक्सप्लॉइट - Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool. एक्सप्लॉइट /admin/bannermessage-ajaxhelper.php?action=acknowledgebannermessage&id= का उपयोग करके SQL क्वेरी निष्पादित करत...
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relationtypelist parameter of listsshow.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in rolelist and inject SQL through...
CVE-2026-82655 Admidio before 5.0.12 SQL Injection via relation_type_list
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relationtypelist parameter of listsshow.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in rolelist and inject SQL through...
EUVD-2026-68241
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relationtypelist parameter of listsshow.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in rolelist and inject SQL through...
CVE-2026-82655
Admidio versions prior to 5.0.12 are affected by a blind SQL injection in the relation_type_list parameter of lists_show.php. Unauthenticated attackers can bypass authentication by supplying a dummy UUID in the role_list parameter, then inject SQL through relation_type_list to execute arbitrary q...
CVE-2025-5287
CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-5287 , targeting a vulnerability in the WordPress Likes and Dislikes Plugin ≤ 1.0.0. The vulnerability allows...
cve-2021-26084-confluence
यह एक त्वरित और गंदा PoC है, जिसे एक विशिष्ट Confluence इंस्टेंस के लिए अनुकूलित किया गया है क्योंकि मौजूदा तैयार PoCs में से कोई भी काम नहीं करता था। जाहिर है, यह लगभग पूरी तरह से https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md और https://github.com/alt3kx/CVE-2021-26084PoC के क...
PT-2026-83581
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.12 Description An issue exists that allows unauthenticated attackers to execute arbitrary SQL queries. By providing a dummy UUID in the role list parameter, attackers can bypass authentication and use the relation...
CVE-2019-9053
CMS Made Simple Estrae i dati carattere per carattere controllando i ritardi...
WsgiDAV MySQL provider has a blind SQL injection
Summary The sample MySQLBrowserProvider builds its SQL queries by concatenating strings, and the record key from the request URL goes straight into the WHERE clause with no escaping. Any user who can reach a share backed by this provider can inject SQL through the URL. Since these read shares are...
CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...
CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...
EUVD-2026-67857
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...
CVE-2026-78072
Joomla Extension - Jefferson49 - Unauthenticated blind SQLi in Sexy Polling Reloaded 5.6.1...
CVE-2026-78070
Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles...