96155 matches found
EUVD-2026-50126
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...
CVE-2026-63230 Pre-authentication error-based SQL injection vulnerability
A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover, via the SCORM report endpoint...
CVE-2026-63230
Koollab LMS is affected by CVE-2026-63230, a pre-authentication SQL injection on the SCORM report endpoint. The vulnerability allows an unauthenticated attacker to read sensitive data, including personally identifiable information, credentials, and valid JWT tokens that could enable account takeo...
CVE-2026-63229
A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable...
CodeAlpha_SecureCodingReview
CodeAlphaSecureCodingReview Manual security code...
PT-2026-65727
The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
PT-2026-65753
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.9 Apache Traffic Server versions 9.0.0 through 9.2.14 Apache Traffic Server versions 10.0.0 through 10.1.3 Description Memory leaks occur when handling HostDB SRV records. Recommendations Upgrad...
404 SEO Redirection <= 1.0 - Unauthenticated SQL Injection
Description The 404 SEO Redirection plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...
CVE-2025-67408
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...
PT-2026-65924
Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4.0 Description The software contains a SQL injection flaw, which occurs when an application improperly handles user-supplied data, allowing an attacker to interfere with the queries that an...
PT-2026-65917
Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, via the 'update class.php' endpoint...
PT-2026-65918
Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0 Description An issue exists in the 'save stud.php' endpoint where improper handling of the fname, lname, and student class parameters allows for SQL Injection. SQL Injection is a...
CVE-2025-67407
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...
PT-2026-65850
A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 inclusive. A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and other unauthorized commands...
CVE-2025-69942
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...
CVE-2025-69942
The kishan0725 Hospital Management System 4.0 is vulnerable to an SQL Injection vulnerability located in the /hms/doctor/view-patient.php?viewid=1 endpoint. This flaw allows for the improper neutralization of special elements used in an SQL command, potentially leading to unauthorized data access...
Nimux 1.0.3
Nimux is a native command surface for authorized security assessments. It combines network enumeration, credential validation, Active Directory operations, Kerberos workflows, remote execution, file movement, secrets collection, DCSync, GPO operations, database clients, and SOCKS routing into one...
PT-2026-65941
Name of the Vulnerable Software and Affected Versions Heimdall Data Database Proxy affected versions not specified Description Remote authenticated attackers can execute arbitrary code with root privileges on affected installations. The issue stems from insufficient validation of user-supplied...