CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88402

A SQL injection vulnerability exists in the checkSQL function of nocobase v2.1.21 . This flaw allows an attacker to inject crafted SQL statements to access sensitive database information . The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.8, indicating a high impact on confidentia...

CVE-2026-61851: Incomplete List of Disallowed Inputs

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery implementation in server/modules/ai/orchestrator/tools/runQuery.js attempts to enforce read-only database access with a blocklist...

MariaDB SQL Injection

The vulnerability of the mysqlrealescapestring function in the MariaDB database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute SQL injections remotely...

cctv

CCTV — HackTheBox ウォークスルー プラットフォーム: HackTheBox | OS: Linux 攻撃チェーン CVE-2024-51482 を悪用した ZoneMinder の SQL インジェクションにより、データベースから bcrypt ハッシュが漏洩する。hashcat でクラックすると SSH アクセスが得られる。ポートフォワーディングで露出した内部の motionEye インスタンスは CVE-2025-60787 に脆弱であり、root シェルを取得できる。 列挙 root@kitploit: nmap -sV -sC 10.129.53.160 -Pn...

Exploit for SQL Injection in Zoneminder

ZoneMinder 1.29/1.30 SQLi to RCE Exploit A ready-to-run Pytho...

Exploit for CVE-2026-88854

CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...

CVE-2026-94042

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...

CVE-2026-88855

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

CVE-2026-94041

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality of the file admin/addmenu.php. The manipulation of the argument item/price/image/type leads to sql injection. It is...

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

EUVD-2026-83767

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

EUVD-2026-83766

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

EUVD-2026-83764

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/addtable.php. The manipulation of the argument table/members/price results in sql injection. It is possible to launch th...