2885 matches found
CVE-2025-55343
Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txtdepecodi, busqueda/busqueda.php txtusuacodi, anexoslista.php raditemp, Administracion/listas/formAreaajax.php codDepe, Administracion/listas/formDepeHijoajax.php codDepe,...
CVE-2025-12598
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function savetenant of the file /adminclass.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been...
EUVD-2025-36445
An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging a previously authenticated connection through a "mmBackup" application. This flaw allows attackers to bypass authentication mechanisms and...
EUVD-2025-36385
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to...
PT-2025-44151
Name of the Vulnerable Software and Affected Versions Asseco mMedica versions prior to 11.9.5 Description An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging a previously authenticated...
ROS-20251028-02
The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...
CVE-2025-12277
CVE-2025-12277 affects Abdullah-Hasan-Sajjad Online-School. The vulnerability is a SQL injection in /studentLogin.php caused by improper handling of the Email parameter, allowing remote exploitation. Affected versions are prior to f09dda77b4c29aa083ff57f4b1eb991b98b68883. Exploitation is possible...
PT-2025-44068
Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload versions 5.1, 6.1, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.5, and 6.5.0.0 IF1 IBM DB2 High Performance Unload version 5.1.0.1 Description An authenticated user can cause the program to crash due to an incorrect calculation...
Oracle Database Server (October 2025 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the SQLcl jgit component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Difficult to...
CVE-2025-62179 WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/cadastrofuncionariopessoaexistente.php endpoint, specifically in the cpf parameter. This vulnerability allows...
PT-2025-41269
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Commerce Bookstore version 1.0 Description A flaw exists that allows for remote manipulation of the register username argument in the /register.php file, leading to SQL injection. The exploit is publicly available...
EUVD-2012-5221
Malware in sbrugna...
EUVD-2010-0696
Malware in sbrugna...
EUVD-2018-7588
Malware in sbrugna...
EUVD-2021-24777
Malware in sbrugna...
EUVD-2019-7820
Malware in sbrugna...
EUVD-2015-0496
Malware in sbrugna...
EUVD-2016-9415
Malware in sbrugna...