LDAP Injection

Overview org.apache.shiro:shiro-core is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Affected versions of this package are vulnerable to LDAP Injection in the DefaultLdapRealm class. An attacker can bypass...

EUVD-2025-210259

Subscriber PHP Object Injection in Entrepreneur - Booking for Small Businesses WordPress Theme = 3.1.3 versions...

EUVD-2025-210253

Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...

EUVD-2025-210250

Unauthenticated SQL Injection in Advanced Ads – Tracking 3.0.7 versions...

EUVD-2025-210258

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

EUVD-2026-37642

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

EUVD-2026-37553

RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator...

EUVD-2026-37630

Subscriber SQL Injection in Cornerstone 7.8.8 versions...

EUVD-2026-37631

Unauthenticated SQL Injection in JobSearch = 3.2.9 versions...

EUVD-2026-37628

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

EUVD-2026-37644

Unauthenticated SQL Injection in WP eMember v10.9.4 versions...

EUVD-2026-37632

Unauthenticated SQL Injection in JetEngine = 3.8.10.1 versions...

EUVD-2026-37618

Unauthenticated SQL Injection in JetEngine = 3.8.9.1 versions...

EUVD-2026-37612

Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...

EUVD-2026-37622

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

EUVD-2026-37619

Unauthenticated SQL Injection in JetSearch = 3.5.17 versions...

EUVD-2026-37617

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

EUVD-2026-37611

Unauthenticated SQL Injection in JetSmartFilters = 3.8.1 versions...

EUVD-2026-37621

Unauthenticated SQL Injection in JetEngine 3.8.9.1 versions...

EUVD-2026-37602

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...