CVE-2025-24659

CVE-2025-24659 1️⃣ Тип компонента Плагин WordPress 2️⃣ Детали компонента Название компонента Premium Packages – Sell Digital Products Securely Уязвимая версия Поскольку плагин Premium...

CVE-2024-2876

CVE-2024-2876 - Уязвимость SQL-инъекции в Email Subscribers от Icegram Express Обзор CVE-2024-2876 — это критическая уязвимость безопасности, обнаруженная в плагине «Email Subscribers by Icegram Express» для WordPress. Эта уязвимость затрагивает версии до 5.7.14 включительно и представляет...

CVE-2025-22710

CVE-2025-22710 1️⃣ Тип компонента Плагин WordPress 2️⃣ Сведения о компоненте Имя компонента WooCommerce Advanced Bulk Edit Products, Orders, Coupons, Any WordPress Post Type – Smart Manager Уязвимая версия ⚠️ Должна существовать хотя бы одна запись, чтобы увидеть разницу в ответах при...

CVE-2022-21661

CVE-2022-21661 POC-видео | WordPress Core 5.8.2 - 'WPQuery' SQL-инъекция CVE-2022-21661 : EDB : https://www.exploit-db.com/exploits/50663...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

EUVD-2026-91650

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

CVE-2026-104625

A security flaw exists in CodeAstro Simple Loan Management System 1.0 within an unknown function of the /admin/index.php file. An attacker can perform a remote SQL injection by manipulating the g_name argument. Public exploits are available and may be used to conduct attacks. No specific remediat...

CVE-2026-56292-AcyMailing-SQLi

CVE-2026-56292 — AcyMailing for Joomla 인증되지 않은 SQL 인젝션 저자: nullwhisper 승인된 보안 연구 / 취약점 검증 용도로만 사용하십시오. AcyMailing for Joomla는 공개 프런트엔드 작업 frontentityselect::loadEntityFront를 노출합니다. 이전 버전에서는 columns 매개변수가 삭제sanitization 없이 SQL 쿼리에 직접 전달됩니다. 패치된 버전에서는 acymsecureDBColumn을 사용하고 ... not secured와 같은 오류...

WordPress Beaver Builder Page Builder – Drag and Drop Website Builder plugin <= 2.11.0.5 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Beaver Builder versions = 2.11.0.5...

CVE-2026-85215

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09...

CVE-2026-104614

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

WordPress SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin <= 3.5.3 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by Adrien Brunner in WordPress Plugin SupportCandy versions = 3.5.3...

EUVD-2026-91647

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104614

A SQL injection vulnerability exists in CodeAstro Simple Pharmacy Management System 1.0 . The flaw is located in the /SimplePharmacy-PHP/product/delete.php file, where improper processing of the ID argument allows for remote exploitation. An exploit is currently publicly available and may be used...

CVE-2026-104614 CodeAstro Simple Pharmacy Management System delete.php sql injection

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2022-28346

CVE-2022-28346 SQL-инъекция в QuerySet.annotate, aggregate и extra Настройка: Выполните ./setup.sh для первоначальной настройки Откройте docker-образ, чтобы инициализировать базу данных: docker exec -it containerid /bin/bash И выполните следующие команды: python manage.py makemigrations...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL 코드 인젝션 SQL 코드 생성 인젝션을 통한 Apache Flink TaskManager의 원격 코드 실행. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 — 코드 인젝션 영향 받는 버전| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 수정된 버전| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1 공격 표면| SQL Gateway REST API 기본 포트 8083, 인증 없음 빠른 ...

wp2shell-PoC

wp2shell-PoC ⚠ 이 도구는 교육 또는 버그 바운티 목적으로만 제작되었습니다. 통제된 환경 외부에서의 무단 사용은 엄격히 금지됩니다. 개요 WordPress Core에 영향을 미치는 wp2shell 취약점 체인에 대한 개념 증명으로, CVE-2026-63030과 CVE-2026-60137을 결합한 것입니다. 이 프로젝트는 REST API Batch 라우트 혼동 취약점과 WPQuery SQL 인젝션 간의 상호작용을 보여주며, 이를 통해 인증 없이 WordPress 전체 장악 및 원격 코드 실행RCE에 이르는 경로를...

EUVD-2026-91632

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...