CVE-2026-116515 itsourcecode Online Book Store book.php sql injection

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

CVE-2026-116515 itsourcecode Online Book Store book.php sql injection

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

log-analyzer-ids

Log Analyzer / Lightweight IDS A Python tool that reads SSH...

SQL Injection

Overview @aws-cdk/aws-redshift-alpha is a The CDK Construct Library for AWS::Redshift Affected versions of this package are vulnerable to SQL Injection via the database-query custom resource handlers, where user-controlled construct property values such as user names, comments, or passwords are...

SQL Injection

Overview aws-cdk.aws-redshift-alpha is a The CDK Construct Library for AWS::Redshift Affected versions of this package are vulnerable to SQL Injection via the database-query custom resource handlers, where user-controlled construct property values such as user names, comments, or passwords are...

CVE-2026-10757

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service which could, depending on the service being configured in a non-default access configuration “public”, include an...

EUVD-2026-110057

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service which could, depending on the service being configured in a non-default access configuration “public”, include an...

CVE-2026-10757 BUG-000187511 - ArcGIS Server has a security vulnerability.

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service which could, depending on the service being configured in a non-default access configuration “public”, include an...

CVE-2026-10757 BUG-000187511 - ArcGIS Server has a security vulnerability.

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service which could, depending on the service being configured in a non-default access configuration “public”, include an...

CVE-2026-10757

A SQL injection vulnerability exists in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux . An attacker with access to the service—which could include an anonymous attacker if the service is configured with "public" access—can execute unauthorized database-specific functions. Patc...

CVE-2026-115418

SQL injection in the database-query custom resource handlers in the Amazon Web Services AWS Cloud Development Kit CDK @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha.0 could allow a third party who can influence construct property values to run SQL statements with Amazon Redshift superuse...

Joomla Simple Membership CVE-2026-102782 Detect

Detects OrdaSoft comsimplemembership 7.4.0 and reachable checkLoginPass task. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Joomla Simple Membership CVE-2026-102782.""" import re from urllib.parse import urlencode from kittysploit import from lib.protocols.http.httpclient import Httpclient...

WordPress Unlimited Elements CVE-2026-103355 detect

Detects Unlimited Elements for Elementor = 2.0.20 CVE-2026-103355: terms-listing widget may concatenate parent-term IDs into SQL unvalidated. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Unlimited Elements for Elementor CVE-2026-103355 exposure.""" from kittysploit import from...

Metabase CVE-2026-72898 SQLi Detect

Probes POST /api/session/resetpassword for undeclared user-id :raw acceptance and optional pgsleep timing oracle. !/usr/bin/env python3 -- coding: utf-8 -- """Metabase CVE-2026-72898 resetpassword SQLi detection.""" from future import annotations import json import re import time from kittysploit...

Joomla Simple Membership CVE-2026-102782 SQL injection

CVE-2026-102782 comsimplemembership 7.4.0: unauthenticated SQL injection on task=checkLoginPass via the login parameter. Uses error-based extractvalue to leak SQL subquery results leak. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla OrdaSoft Simple Membership CVE-2026-102782 unauth SQLi."""...

Magento CVE-2015-1397 Shoplift Detect

Fingerprints Magento and probes CmsWysiwyg/directive/index for SUPEE-5344 missing stacked SQLi sink. !/usr/bin/env python3 -- coding: utf-8 -- """Magento CE CVE-2015-1397 Shoplift SQLi surface detect.""" import base64 from kittysploit import from lib.protocols.http.httpclient import Httpclient...

CVE-2026-115418

SQL injection in the database-query custom resource handlers in the Amazon Web Services AWS Cloud Development Kit CDK @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha.0 could allow a third party who can influence construct property values to run SQL statements with Amazon Redshift superuse...

CVE-2026-115418 SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha

SQL injection in the database-query custom resource handlers in the Amazon Web Services AWS Cloud Development Kit CDK @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha.0 could allow a third party who can influence construct property values to run SQL statements with Amazon Redshift superuse...

CVE-2026-115418

A SQL injection vulnerability exists in the database-query custom resource handlers within the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module. This flaw affects versions prior to 2.274.0-alpha.0 . An attacker capable of influencing construct property valu...

EUVD-2026-109988

SQL injection in the database-query custom resource handlers in the Amazon Web Services AWS Cloud Development Kit CDK @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha.0 could allow a third party who can influence construct property values to run SQL statements with Amazon Redshift superuse...