PT-2026-87047

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

EUVD-2026-72851

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-79570

The software mfish-nocode-pro v1.0.0 is vulnerable to a SQL injection flaw located in the tableName parameter at the /sys/dbConnect/data endpoint. An attacker can exploit this by sending a crafted SQL statement to gain unauthorized access to sensitive database information . The vulnerability has ...

CVE-2026-79570

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3388)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

CVE-2026-78837: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-82753

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...

CVE-2026-38291

creationtimestamp| type| source ---|---|--- 2026-09-07 10:30:03+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3muwcgx2jkj23...

r2ai v1.4.4

R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...

CVE-2026-86302: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...

PT-2026-86918

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash authentication oauth2 server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolve...

CVE-2026-82753: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...

Construction and Natural Language Querying of a Cybersecurity Knowledge Graph

Cybersecurity vulnerability information is distributed across numerous platforms and databases, making it difficult for researchers and practitioners to obtain a unified and structured understanding of existing threats. This is a critical issue in cybersecurity, where timely access to accurate...

ROS-20260907-73-0063

The vulnerability of the closesqleditorsession and checktransactionstatus functions in the pgAdmin 4 database management tool is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

MOVEit Transfer - Remote Code Execution

In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...

CVE-2026-86217

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

CVE-2026-86217

CVE-2026-86217 affects code-projects Hotel and Tourism Reservation in PHP version 1.0 . The vulnerability resides in the Database Backup Handler component, specifically in the file /ht/hotel_db (1).sql , which is exposed and accessible over the network without authentication. The exposed SQL data...

CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

EUVD-2026-72138

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...

CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hoteldb%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is...