Axelor-vulnerability-CVE-2025-50341

CVE-2025-50341: Inyección SQL en Axelor ID CVE: CVE-2025-50341 Reportero: Milad Seddigh Producto: Axelor Versiones afectadas: v5.2.4 Impacto: Inyección SQL → exfiltración del contenido de la base de datos. Resumen Se descubrió una vulnerabilidad de inyección SQL basada en booleanos en el parámetr...

ZoneMinder v1.37.* <= 1.37.64 - SQL Injection

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65. id: CVE-2024-51482 info: name: ZoneMinder v1.37. = 1.37.64 - SQL Injection author...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

CVE-2025-2812

CVE-2025-2812 — Vulnerabilidad de inyección SQL en "Bilet Satış Otomasyonu" de Mydata Bilişim Ltd. Şti 📌 CVE-ID: CVE-2025-2812 📢 Aviso USOM: tr-25-0099 🛡️ Tipo de vulnerabilidad: CWE-89 - SQL Injection Boolean-based Blind 🏢 Producto afectado: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti 🌐 URL...

CVE-2026-89012

CVE-2026-89012 — Omisión de la lista de denegación del filtro SQL de Dolibarr Exploit para CVE-2026-89012: la lista de denegación de campos prohibidos en forgeSQLFromUniversalSearchCriteria introducida con la corrección de CVE-2026-71510 utiliza un inarray sensible a mayúsculas y minúsculas...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...

cve-2025-6907

CVE‑2025‑6907 SQLi 利用工具 文件: exploit.c 作者: Byte Reaper 目标服务: CODEPROJECT 类型: SQL注入 🔎 概述 这是一个独立的基于C语言的SQL注入利用工具，针对CODEPROJECT 服务中的CVE‑2025‑6907 漏洞。它结合了多种高级技术： 自动化载荷枚举（包括基于布尔和时间的检测） 内联汇编系统调用用于目录/进程检查 内存映射转储（/proc/self/maps） 轮换用户代理字符串 可选环境检查（文件、文件夹、Apache） 详细的详细输出和载荷地址映射 ⚙️ 功能 部分URL和完整URL模式 （-u /...

CVE-2025-41373

CVE-2025-41373 – SQL注入漏洞 in Gandia Integra Total 作者： Byte Reaper CVE编号： CVE-2025-41373 漏洞类型： 经过身份验证的SQL注入 受影响路径： /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= 描述： 该端点将 idestudio 参数直接拼接到 SQL 查询中，未进行适当的清理或参数化，使得攻击者能够注入任意 SQL。本 PoC 利用基于布尔和基于时间的两种技术来检测和展示该漏洞。 用法 Build gc...

CVE-2026-79303

CVE-2026-79303 Inyección SQL ciega booleana Descripción : Las sentencias SQL dinámicas se generan sin la validación de datos requerida y sin utilizar sentencias parametrizadas o procedimientos almacenados. Impacto : SQLi Vector CVSSv3.1 : AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 9.9 Crítico CWE :...

cve-2026-5147-exp

Script de explotación cve-2026-5147 Orientado a la validación de vulnerabilidades autorizada y prácticas en entornos de laboratorio: realiza inyección SQL Boolean-based blind EXP / INSTR o ASCII y Time-based blind if + ascii + sleep sobre interfaces con inyección SQL en MySQL, con opción de...

CVE-2026-93221

In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without serialization. In particular, nfsd4endgrace guards its drain path with a...

CVE-2024-13489

CVE-2024-13489 LTL Freight Quotes – Old Dominion Edition = 4.2.10 - Inyección SQL no autenticada Descripción El plugin LTL Freight Quotes – Old Dominion Edition para WordPress es vulnerable a Inyección SQL a través de los parámetros 'editid' y 'dropshipeditid' en todas las versiones hasta la 4.2....

CVE-2025-65354

CVE-2025-65354 — Vulnerabilidad de inyección SQL Resumen Existe una vulnerabilidad de inyección SQL en la aplicación event-management de PuneethReddyHC versión 1.0 debido a un manejo inadecuado de las entradas. Tipo de vulnerabilidad Inyección SQL Componente afectado Endpoint:...

CVE-2026-84713

A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notification configuration is protected from API filtering, its recipient value is copied in clear text into the unprotected Notification.recipients field on every send. Because the credential-type...

CVE-2026-84713 Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter oracle

A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notification configuration is protected from API filtering, its recipient value is copied in clear text into the unprotected Notification.recipients field on every send. Because the credential-type...

CVE-2026-84713

A flaw exists in the automation-controller notification subsystem of Red Hat Ansible Automation Platform 2.7 (and related container releases). While NotificationTemplate.notification_ configurations are protected, the recipient value is copied in clear text into the unprotected Notification.recip...

EUVD-2026-85610

A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notification configuration is protected from API filtering, its recipient value is copied in clear text into the unprotected Notification.recipients field on every send. Because the credential-type...

CVE-2026-84713

A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notification configuration is protected from API filtering, its recipient value is copied in clear text into the unprotected Notification.recipients field on every send. Because the credential-type...

CVE-2026-19179

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression...

EUVD-2026-85357

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression...