CVE-2025-43537

CVE-2025-43537 Apple Security Credit Researcher: Al Sadman Awal Officially credited by Apple Product Security for the responsible disclosure of CVE-2025-43537. Overview CVE-2025-43537 is a security vulnerability identified during independent security research and responsibly disclosed to Apple...

CVE-2026-108487

The Hossni Mubarak Books Gallery (wp-books-gallery) WordPress plugin, versions up to and including 4.8.4 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to inject ...

WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Books Gallery versions = 4.8.4...

BiblioRCE

An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...

CVE-2026-101110

CVE-2026-101110 — OrdaSoft Book Library Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101110 — OrdaSoft Book Library Free for Joomla ≤ 6.4.6. Upgrade to 6.4.7+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101110 Catalog| https://pocbit.org/pocs/ Component| combooklibrary Fil...

Cybersecurity-Books

Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...

CVE-2026-96822

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

CVE-2026-96822 WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

CVE-2026-96822

The WordPress Books Gallery plugin, version 4.8.3 and below , is vulnerable to an unauthenticated SQL Injection . This vulnerability allows a remote attacker to execute arbitrary SQL commands against the database. Exploitation details are not provided in the documentation, and no specific remedia...

CVE-2026-96822 WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

EUVD-2026-89875

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

PT-2026-103207

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

CVE-2026-96822: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...

WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by sungbyeongchan in WordPress Plugin Books Gallery versions = 4.8.3...

CVE-2026-101110

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

EUVD-2026-88436

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110

The Book Library (Free) Joomla Extension by ordasoft.com (versions

CVE-2026-101110 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

PT-2026-102306

Name of the Vulnerable Software and Affected Versions Book Library Free versions prior to 6.4.6 Description An unauthenticated SQL Injection exists in the books function within the site/booklibrary.php file. The issue occurs when the function processes the field and direction request parameters...