Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

ChurchCRM - SQL Injection

A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper...

JS Help Desk <= 2.8.2 - SQL Injection

JS Help Desk WordPress plugin 2.8.2 contains a SQL injection caused by insufficient escaping and preparation of user-supplied values in 'js-support-ticket-token-tkstatus' cookie, letting unauthenticated attackers extract sensitive database information, exploit requires no authentication. id:...

CVE-2026-22599

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-22599 CVE-2026-22599 Strapi 5.33.1 - Strapi I am @abraxasnull. Loopback lab. CVE-2026-22599-Abraxas-Labs.py chdirs into lab/ and runs run.sh. Content-Type Builder write API database-query injection. Yup...

EUVD-2026-101944

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2026-76182

In Eclipse Jetty , the TryPathsHandler and TryFilesFilter components are vulnerable to an injection issue when configured to forward requests to template URIs like index?p=$path. Because the system fails to properly handle reserved URI query characters , a request path containing characters such ...

CVE-2026-56096

CVE-2026-56096: Solr Query Injection & Blind Data Extraction in TYPO3 EXT:solr An architectural security vulnerability was discovered in the official TYPO3 Apache Solr extension EXT:solr / apache-solr-for-typo3/solr. The issue allows unauthenticated remote attackers to inject arbitrary Solr/Lucen...

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale Authentication Bypass & RCE Reproducible lab environment for CVE-2024-3408, an authentication bypass and remote code execution vulnerability in D-Tale. Vulnerability D-Tale versions up to 3.15.1 are vulnerable due to: 1. Hardcoded SECRETKEY "Dtale" for Flask session signing...

CVE-2026-74251

Unauthenticated SQL Injection via Attribute Filter in Phoca Cart Phoca Cart ≤ 6.1.6 — Unauthenticated Attacker Extracts Full Database via Time-Based Blind Injection SUMMARY The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQ...

CVE-2022-0739

CVE-2022-0739 Python PoC Exploit for CVE-2022-0739 Features Database Metadata Lookup Wordpress User Credential Dump Arbitrary Blind Query Injection 💉 Usage usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help message and exit -u URL, --url URL URL of the page containing the...

EUVD-2026-93771

LangChain: MongoDBChatMessageHistory query injection can allow cross-session access...

GHSA-M6RX-H84Q-8R95 LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

Impact MongoDBChatMessageHistory did not enforce the documented string type for session identifiers at runtime. In affected applications, a structured session identifier could be interpreted as a MongoDB query condition rather than as a literal identifier. Applications are affected when they pass...

CVE-2026-102156 Security Advisory 0191

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

CVE-2026-102156 Security Advisory 0191

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

CVE-2026-102156

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input allows an unauthenticated network attacker to inject queries against a configured directory service. This vulnerability occurs under high-complexity conditions and could impact the confidentiality of the ...

CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-104047

A vulnerability exists in SSSD when configured to use Microsoft Entra ID . The issue stems from a lack of proper sanitization of search inputs before they are incorporated into directory query filters, leading to a query injection flaw. A local user can exploit this by submitting a crafted lookup...

CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...