LearnPress < 4.2.7.1 - SQL Injection

The LearnPress - WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'conlyfields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of...

VICIdial - SQL Injection

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database. id: CVE-2024-8503 info: name: VICIdial - SQL Injection author: s4e-io severity: critical description:...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core 블라인드 SQL 인젝션 취약점 CVE-2025-69295는 TeconceTheme Coven Core WordPress 테마의 Coven Core 컴포넌트에 영향을 미치는 SQL 인젝션 취약점입니다. 이 취약점은 사용자 제공 입력이 SQL 쿼리에 사용되기 전에 적절히 중화되지 않아 공격자가 백엔드 데이터베이스 쿼리에 악성 SQL 명령을 주입할 수 있게 함으로써 존재합니다. 이 취약점은 특히 블라인드 SQL 인젝션을 가능하게 하며, 공격자는 조작된 요청을...

[SECURITY] Fedora 45 Update: pgmodeler-1.2.2-4.fc45

PostgreSQL Database Modeler, or simply, pgModeler is an open source tool for modeling databases that merges the classical concepts of entity-relationship diagrams with specific features that only PostgreSQL implements. The pgModeler translates the models created by the user to SQL code and apply...

[SECURITY] Fedora 45 Update: osinfo-db-tools-1.12.0-10.fc45

This package provides tools for managing the osinfo database of information about operating systems for use with virtualization...

EUVD-2026-91833

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

PT-2026-104529

Name of the Vulnerable Software and Affected Versions SaveTo Wishlist Lite versions prior to 1.1.5 Description An issue exists where parameters are not sanitized or escaped before being used in the ORDER BY clause of a SQL query. This allows unauthenticated attackers to append additional SQL...

CVE-2023-37941

Superset 기본 캐시 내 Pickle RCE 악용 정보 저자 Dinis Cruz 프로젝트 Superset 설명 Apache Superset는 캐싱을 위한 여러 옵션을 제공하며, 모두 Flask-Caching을 기반으로 합니다. 내장 캐시는 값을 나중에 검색하기 위해 직렬화합니다. 이 직렬화 및 검색은 Pickle을 사용하여 수행되며, 이는 Python 객체의 역직렬화를 허용하여 코드 실행으로 이어집니다. 내장 캐시는 메타데이터 데이터베이스에 정보를 기록하며, 이는 이 데이터베이스에 접근할 수 있는 공격자가 권한을 상승시키...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer 취약점 악성 MySQL 서버를 통한 임의 파일 읽기 1. Adminer란 무엇인가? Adminer는 MySQL, PostgreSQL, SQLite 또는 SQL Server 데이터베이스를 쉽게 관리할 수 있는 웹 기반PHP 도구입니다. phpMyAdmin의 가벼운 대안으로 널리 배포됩니다. 영향을 받는 버전: Adminer ≤ 4.6.2 2. 취약점의 본질은 무엇인가? 2.1. 접근 제어 실패 Adminer는 임의의 원격 MySQL 서버 에 대한 연결을 허용합니다. 그런데 MySQL...

CVE-2026-94592

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-94593

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available...

CVE-2026-94592 Armatura LLC Armatura One Use of Hard-coded Credentials

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-94592

The Armatura One platform contains a vulnerability where the database initialization routine assigns a fixed, vendor-defined password to the database superuser account instead of generating a unique one. An attacker with server operating system access and knowledge of this hard-coded value can au...

CVE-2024-49681

CVE-2024-49681 WP Sessions Time Monitoring Full Automatic = 5.0.12 time-based blind query SLEEP Payload: action=activitytimeaction&uri=test Parameter: uri POST Type: error-based...

CVE-2022-31890

osTicket용 CVE-2022-31890 | 지원 티켓 시스템 닉네임: python nickname.py The output of the first nickname in the table. 비밀번호: python password.py The output of the first password in the table. 파일로 출력: python dumpFile.py cat dump.txt || nickname::password 콘솔로 출력: python dumpConsole.py Output to console ||...

ICE Has Been Dumping Protester Photos Into a Palantir Database

DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a database run on Palantir software, newly unsealed court filings say...

CVE-2014-125130

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

EUVD-2014-9822

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2014-125130 CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...