CVE-2026-51077: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

PT-2026-64910

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector...

CVE-2026-51077

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

CVE-2026-59549: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...

Security Advisory 0145

Security Advisory 0145 . CSAF PDF Date: July 27, 2026 Revision | Date | Changes ---|---|--- 1.0 | July 27, 2026 | Initial release 1.1 | August 10, 2026 | Added CSAF JSON file for download Description: SQL injection in a flow metrics API method enabling server-side request forgery CVE: CVE-2026...

Xerox AltaLink Improper Neutralization of Special Elements used in an SQL Command (CVE-2021-28668)

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

CVE-2026-59527: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...

CVE-2026-59533: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Relevanssi Light = 1.2.2 versions...

CVE-2026-66427: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WP Google Review Slider = 18.4 versions...

CVE-2026-65766: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector...

CVE-2026-51077

Dede CMS version 5.7.118 contains a SQL injection vulnerability within the sys_sql_query.php component. A remote attacker can exploit this flaw by sending crafted data to the sqlquery parameter to obtain sensitive information from the database. At this time, there is no information regarding a ne...

Exploit for SQL Injection in Wordpress

CVE-2026-60137-With-Skip-...

Exploit for SQL Injection in Trispark Novusedu

CVE-2021-3262 SQL Injection in TripSpark VEO Transportation...

Exploit for SQL Injection in Fortra Delivernow

CVE-2021-26837 SQL Injection in HelpSystems / Fortra Delive...

SQL Injection

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to SQL Injection in the json field enrichment process. An attacker can access unauthorized data, execute arbitrary JavaScript on the database server, perform cross-collection queries, or modify and...

Budibase: SQL Injection via `multipleStatements: true`

Summary A critical SQL injection vulnerability was discovered in Budibase's MySQL integration that allows remote attackers to execute arbitrary SQL commands. Details Vulnerability Type SQL Injection Description The MySQL integration component in Budibase is configured with multipleStatements: tru...

CVE-2026-65707

Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...

CVE-2026-65707

Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...

Exploit for CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla Pre-Auth SQL Injection filter...

laravel-threat-detection v1.4.0

Laravel Threat Detection Passive intrusion detection for Laravel — see every SQL injection, XSS, scanner, and bot probe hitting your app, logged with full context. It's an IDS, not a WAF: it never blocks, filters, or modifies a request. Drop it into any Laravel 10–13 app and it starts scanning...