WordPress Check & Log Email plugin < 2.0.15 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Check & Log Email versions 2.0.15...

PT-2026-66859

Name of the Vulnerable Software and Affected Versions SourceCodester Modern Loan Management System version 1.0 Description An issue exists in the 'ajaxData.php' endpoint where improper handling of the district id, division id, region id, and ward id parameters allows for SQL Injection. SQL...

Qnap QTS and QuTS hero OS Command Injection (CVE-2026-22893)

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-36374

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

LDAP Injection

Overview org.apache.zeppelin:zeppelin-server is a web-based notebook that enables interactive data analytics. You can make beautiful data-driven, interactive and collaborative documents with SQL, Scala and more. Affected versions of this package are vulnerable to LDAP Injection through the...

CVE-2026-44616

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...

BIT-PYTHON-MIN-2026-0864 Configuration Injection via Carriage Return (\r) in write() method

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value...

WordPress WP Hotel Booking plugin < 2.3.2 - Hotel Manager+ SQL Injection vulnerability

Hotel Manager+ SQL Injection vulnerability discovered by Mokksh Parekh in WordPress Plugin WP Hotel Booking versions 2.3.2...

CVE-2026-15929

CVE-2026-15929 describes an SQL injection vulnerability in LG Electronics SmartShare. The issue arises from improper neutralization of special elements in SQL commands, affecting SmartShare up to version 2.3.1712.1202 on Windows 10 and earlier. The CVSS data indicates an adjacent attack vector wi...

CVE-2026-17853

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2025-210536

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

CVE-2026-17818

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66581

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete membership.php?id=1...

PT-2026-66352

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command, known as SQL Injection, allows an attacker to disclose sensitive memory and gain read access to the file...

CVE-2025-69934

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the /delete_members.php?id=1 endpoint. The vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation can lead to high impact consequences regarding confidenti...

CVE-2025-69936

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

PT-2026-66345

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

CVE-2025-69936

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the /edit_member.php?id=1 endpoint. This vulnerability, classified as an Improper Neutralization of Special Elements used in an SQL Command , allows an attacker to potentially execute arbitrary SQL statements. Th...

EUVD-2025-210558

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...

PT-2026-66612

Name of the Vulnerable Software and Affected Versions Kamaji versions prior to 26.7.4-edge Description The PostgreSQL and MySQL datastore drivers build Data Definition Language DDL statements by interpolating user-supplied DataStoreUsername and DataStoreSchema directly into SQL using fmt.Sprintf...