Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the recursive traversal of deeply nested unary expressions in the AST. An attacker can cause a fatal stack overflow and terminate the process by submitting specially crafted SQL input that results in...

WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin HashBar – WordPress Notification Bar versions = 2.0.3...

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerability in jackc/pgx

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package jackc/pgx PostgreSQL driver that is affected by a critical-severity SQL injection vulnerability. IBM Optim 2.0.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version...

CVE-2026-94144

A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library ormlib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-94144

A SQL injection vulnerability exists in drogonframework drogon up to 1.9.13 , specifically in the makeCriteria function within orm_lib/src/Criteria.cc of the ORM component. Manipulating the filter argument allows a remote, unauthenticated attacker to inject SQL, potentially compromising confident...

CVE-2026-94144 drogonframework drogon ORM Criteria.cc makeCriteria sql injection

A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library ormlib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-94144 drogonframework drogon ORM Criteria.cc makeCriteria sql injection

A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library ormlib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-94144 drogonframework drogon ORM Criteria.cc makeCriteria sql injection

A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library ormlib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been...

EUVD-2026-83842

A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library ormlib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-94143

A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be carried out...

EUVD-2026-83836

A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be carried out...

CVE-2026-94143 drogonframework drogon ORM Mapper Mapper.h orderBy sql injection

A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be carried out...

CVE-2026-94143

Drogon (C++ web framework) up to 1.9.13 is affected by a SQL injection in the ORM Mapper component, specifically in the Mapper::orderBy function within Mapper.h. Manipulating the sort argument allows a remote, unauthenticated attacker to inject SQL. A public proof-of-concept exploit is available....

CVE-2026-94143 drogonframework drogon ORM Mapper Mapper.h orderBy sql injection

A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be carried out...

CVE-2026-94143 drogonframework drogon ORM Mapper Mapper.h orderBy sql injection

A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be carried out...

CVE-2026-94110

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

CVE-2026-94110 QCMS Content Detail Controllers.php self_Tmp sql injection

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

CVE-2026-94110 QCMS Content Detail Controllers.php self_Tmp sql injection

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

CVE-2026-94110

QCMS up to 6.0.6 is vulnerable to a remote SQL injection in the self_Tmp function of Lib/Config/Controllers.php (Content Detail Page component). The root cause is unsanitized use of the ID argument. A publicly disclosed proof-of-concept exploit is available. Notably, the router parses raw REQUEST...

EUVD-2026-83822

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...