272483 matches found
EUVD-2026-89799
A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...
CVE-2026-103115
A security flaw exists in OS4ED openSIS-Classic up to version 9.3 within the Student Search component. Specifically, an unknown function in the file functions/CustomFieldsFnc.php is vulnerable to SQL injection when the cust argument is manipulated. This flaw can be triggered via a remote attack ....
CVE-2026-103115 OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...
CVE-2026-103115 OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...
postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
A SQL injection flaw in PostgreSQL's EXTRACT expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pgdump or psql inspect o...
wordpress_exploit
Vulnerable Lab: CVE-2026-63030 WordPress This environment r...
CVE-2025-26198
CVE-2025-26198 - Demostración de Inyección SQL Proyecto académico ENSIMAG - Seguridad 3A Autores: Wail Yacoubi, Mohammed-Yassine Akhmari Fecha: Enero 2026 Advertencia Este código es intencionalmente vulnerable con fines educativos. Nunca desplegar en producción. Descripción Reproducción de...
CVE-2019-9053-POC
CMS Made Simple ⚠️ Descargo de responsabilidad: Este script es solo para fines educativos y de pruebas autorizadas. No lo utilice en sistemas que no sean de su propiedad o para los que no tenga permiso explícito para probar. El autor y los colaboradores no se responsabilizan por el mal uso o los...
CVE-2025-55575
smm-panel-sqliCVE-2025-55575 Detección de Inyección SQL basada en tiempo para SMM Panel Resumen Esta plantilla detecta una vulnerabilidad de Inyección SQL basada en tiempo en el parámetro servicedetail del SMM Panel a través de solicitudes HTTP POST a /ajaxdata. La explotación puede permitir a...
cve-2024-48325
CVE-2024-48325 Descripción: Un usuario autenticado puede abusar de una vulnerabilidad de inyección SQL que existe en la función getDocuments de la clase InstituicaoDocumentacaoController. El parámetro instituicaoid en /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoi...
WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Business Directory versions = 6.4.27...
WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Activity Log versions = 5.6.6...
CVE-2026-103113
A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...
CVE-2026-103114 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...
CVE-2026-103114 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...
CVE-2026-103114
A SQL injection vulnerability exists in OS4ED openSIS-Classic up to version 9.3 . The flaw is located in the Assignment Management Endpoint within the DBQuery_assignment function of the modules/grades/Assignments.php file. An attacker can remotely initiate the attack by manipulating the Tables ar...
EUVD-2026-89777
A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...
I Want Better Reporting on AI Genie Behavior
AI systems are regularly completing tasks in ways that their prompters don't want or intend. Some of them are disturbing, and some of them are dangerous. This is something I've been calling "genie behavior," because I think that really gets at the core of what's happening. I wish the popular pres...
WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Intrudify in WordPress Plugin Media LIbrary Assistant versions = 3.41...