CVE-2026-114364 Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized...

Exploit for Interpretation Conflict in Wordpress

Full Reproducibility Report for CVE-2026-63030 & CVE-2026-6013...

CVE-2026-2613

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer...

CVE-2026-118871

SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in...

EUVD-2026-115116

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer...

CVE-2026-2613 SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer...

CVE-2026-2613

Multiple WSO2 products are affected by a blind SQL injection vulnerability in the Admin REST API . The root cause is the lack of adequate sanitization for user-supplied input, which allows it to be included in the structure of SQL statements. An attacker with administrator privileges can exploit ...

CVE-2026-2613 SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer...

EUVD-2026-115113

SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in...

CVE-2026-118871 SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product

SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in...

CVE-2026-118871

A SQL injection vulnerability exists in the ZTE ElasticNet RNIA R18 NGI product. This internal threat level vulnerability allows authenticated attackers to steal database information while logged into the system. Technical details regarding the specific affected component or root cause are not pr...

CVE-2026-118871 SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product

SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in...

CVE-2026-57190

A flaw was found in Asterisk. When the PostgreSQL or TDS Channel Event Logging CEL backends are enabled and custom event data is logged without proper validation, an attacker can supply malicious input to trigger SQL injection. This vulnerability allows an attacker to execute arbitrary SQL comman...

CVE-2026-120347

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-120347 dayrui XunRuiCMS Member View.php View sql injection

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

EUVD-2026-115069

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-120347

The dayrui XunRuiCMS software, specifically versions up to 4.7.4 , contains a SQL injection vulnerability in the Member Module . The flaw exists within the View function of the file dayrui/Fcms/Core/View.php, where a manipulation of the catid argument allows for remote exploitation. The impact in...

CVE-2026-120342

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project. The affected element is an unknown function of the file viewquery.php. The manipulation of the argument eid results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This produ...

EUVD-2026-115065

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project. The affected element is an unknown function of the file viewquery.php. The manipulation of the argument eid results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This produ...

CVE-2026-120342

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project within an unknown function of the viewquery.php file. The root cause is the improper neutralization of the eid argument, allowing for remote execution of attacks. While the product uses a rolling release and speci...