Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/11/06 12:52 p.m.•35 views

BurpSuite-collections

Burp-Suite-collections BurpSuite related collection project, plugins are mainly non-BApp Store store All localization or use of burpsuite is under the premise that you have configured the Java environment!!! Related tutorial Latest version after 202212 activation refer to thisproject solve it...

6AI score
SaveExploits0References33
NVD
NVD
•added 2026/10/19 4:17 p.m.•14 views

CVE-2026-112306

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS0.00311EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/19 3:28 p.m.•29 views

CVE-2026-112306

The NocoBase @nocobase/plugin-collection-sql component, version 2.2.28 and below , is vulnerable to an SQL injection flaw. The root cause is the ability for privileged users to bypass the checkSQL() validation via the sqlCollection:setFields action. This allows an attacker with the collection-sql...

8.6CVSS5.9AI score0.00311EPSS
SaveExploits0References4
Mend
Mend
•added 2026/10/19 3:28 p.m.•14 views

CVE-2026-112306

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS5.9AI score0.00311EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/19 3:28 p.m.•14 views

CVE-2026-112306 NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS5.9AI score0.00311EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/19 3:28 p.m.•19 views

CVE-2026-112306 NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/10/19 3:28 p.m.•14 views

EUVD-2026-104398

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS5.9AI score0.00311EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/19 3:28 p.m.•46 views

CVE-2026-112306 NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS0.00311EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•15 views

CVE-2026-112306: Improper Neutralization of Special Elements used in an SQL Command

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS5.9AI score0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•15 views

PT-2026-117466

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

8.6CVSS5.9AI score0.00311EPSS
SaveExploits0References5
Fedora
Fedora
•added 2026/08/07 1:14 a.m.•31 views

[SECURITY] Fedora 44 Update: gstreamer1-plugins-good-1.28.6-1.fc44

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

5.5AI score
SaveExploits0
Mend
Mend
•added 2026/07/15 8:13 p.m.•10 views

CVE-2026-52888

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. In 2.0.59 and earlier, NocoBase @nocobase/plugin-collection-sql used the checkSQL function in packages/plugins/@nocobase/plugin-collection-sql/src/server/utils.ts with an incomplete...

8.2CVSS5.9AI score0.00469EPSS
SaveExploits0References9
Rows per page
Query Builder