CVE-2026-105149 mooSocial all-products sql injection

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-105149

A security flaw exists in mooSocial versions up to 3.2.4 due to improper processing of the /stores/all-products file. An attacker can perform a remote SQL injection by manipulating the rating argument. Public exploit code is available for this vulnerability. The vendor has not responded to disclo...

CVE-2026-105149 mooSocial all-products sql injection

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...

EUVD-2026-92095

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2025-50383

CVE-2025-50383 Descripción Un usuario autenticado con pocos privilegios puede explotar esta vulnerabilidad enviando una solicitud HTTP POST manipulada con un parámetro orderby malicioso por ejemplo, orderby=IF1=1,SLEEP5,1. Esto puede desencadenar una inyección SQL ciega basada en tiempo, lo que...

CVE-2026-105146

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

wp2shell-poc

Cómo puede funcionar esto En qué se diferencia este PoC de los exploits públicos de wp2shell Todos los PoC weaponizan los mismos dos bugs: la confusión de rutas del batch REST CVE-2026-63030 y la inyección SQL authornotin CVE-2026-60137, con la misma forma de batch doblemente anidado. Lo que...

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227 CVE-2024-25227 Exploit CVE-2024-25227 es una vulnerabilidad SQLi de ABO.CMS 5.8 encontrada en el parámetro "tblogin" PoC: POST /login.aspx HTTP/1.1 Host: localhost Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 Windows NT 10.0;...

wp2shell

wp2shell Explota la confusión de rutas de la API REST de WordPress CVE-2026-63030 + la inyección SQL CVE-2026-60137 en el endpoint por lotes para lograr la ejecución remota de código. Vulnerabilidades Confusión de rutas CVE-2026-63030 El endpoint por lotes /batch/v1 de la API REST de WordPress no...

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — Asistente de IA de emlog CSRF → Ejecución de SQL → Toma de control de administrador PoC de la falta de protección CSRF en el endpoint executetool del Asistente de IA de emlog pro, que permite a un atacante aprovechar la sesión autenticada de un administrador para ejecutar SQL...

CVE-2026-57517

Control Web Panel ≤ 0.9.8.1224 — Inyección SQL Ciega a Ejecución Remota de Código Puerto 2083 → userRes POST → INTO DUMPFILE → Puerto 2031 Webshell → cwpsvc 🔴 Resumen de la Vulnerabilidad CVE-2026-57517 es una inyección SQL ciega crítica previa a la autenticación en Control Web Panel CWP versione...

EUVD-2026-92092

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105146 Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105146 Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105146

A SQL injection vulnerability exists in Comsenz Discuz! versions X5.0-20260801 , X5.0-20260820 , and X5.0-20260910 . The flaw is located within the modmedalsubmit function of the upload/source/app/admin/child/medals/mod.php file in the Admin Medal Moderation component. Specifically, manipulating ...

CVE-2026-103355

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2025-25257

🚨 CVE-2025-25257 – Inyección SQL a RCE en FortiWeb Inyección SQL crítica → Ejecución de Webshell Descubierto y armado por 0xgh057r3c0n 🧠 Resumen de la vulnerabilidad CVE-2025-25257 afecta a sistemas FortiWeb que exponen el endpoint /api/fabric/device/status, el cual no sanitiza correctamente la...

CVE-2026-79752

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-79752 CVE-2026-79752 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-79752-Abraxas-Labs.py. CAST AS literal. FunctionsBuilder::cast and extract / datePart / dateAdd splices...

CVE-2024-24401

Informe de Vulnerabilidad CVE Descubierto DISEÑADO PARA EJECUTARSE EN KALI LINUX Notas Nagios ha parcheado la versión 2024R1.0.1 en todas las descargas recientes. Para determinar si un objetivo es vulnerable, asegúrese de que esté utilizando una descarga anterior de 2024R1.0.1. El script...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX En agosto de 2025, se reveló una vulnerabilidad crítica en el módulo Endpoint de FreePBX. CVE-2025–57819 permite que un atacante no autenticado explote una inyección SQL en el módulo Endpoint y, mediante una cadena de manipulación de la base de datos y ejecución de tareas...