265318 matches found
Exploit for CVE-2026-67401
CVE-2026-67401 — cPanel/WHM EmailTrack SQL Injection → Root RC...
PT-2026-94276
Name of the Vulnerable Software and Affected Versions PublishPress Series versions prior to 3.1.4 Description An SQL Injection issue exists that allows an administrator to execute malicious SQL queries. SQL Injection is a technique where an attacker inserts malicious SQL code into a query,...
PT-2026-95006
Name of the Vulnerable Software and Affected Versions SigNoz versions 0.88.0 through 0.142.0 Description Authenticated attackers can execute arbitrary SQL queries and retrieve results in HTTP responses. This occurs because the trace-funnel analytics endpoints interpolate the service name and span...
CVE-2026-66631: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
CVE-2026-66618: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WP Maps = 4.9.9 versions...
PT-2026-95065
Name of the Vulnerable Software and Affected Versions Frappe HR versions prior to 16.7.0 Description An authenticated user with the HR User role can perform SQL injection through filters in the Salary Payments Based on Payment Mode report. The issue occurs in the salary payments based on payment...
Linux Distros Unpatched Vulnerability : CVE-2026-77874
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - org.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization...
PT-2026-94271
Name of the Vulnerable Software and Affected Versions Newsletters versions prior to 4.19 Description An SQL Injection issue exists in the administrator section, allowing an attacker to interfere with the queries that an application makes to its database. Recommendations Update to a version newer...
CVE-2026-54524: Improper Neutralization of Special Elements used in an SQL Command
Frappe HR is an open-source human resources management solution HRMS. Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Payments Based on Payment Mode report. In...
PT-2026-94226
Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.27.0 Description Improper input validation allows unsanitized user-controlled values to be interpolated into SQL strings executed as multi-statement queries. An attacker can execute arbitrary SQL statements...
CVE-2026-54596: Improper Neutralization of Special Elements used in an SQL Command
ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can inject SQL through the frequency parameter handled by...
PT-2026-95130
Name of the Vulnerable Software and Affected Versions SigNoz versions 0.87.0 through 0.141.0 Description Authenticated users with a Viewer role or higher can perform SQL injection by providing specially crafted telemetry field-key names. The application fails to properly escape these names in the...
CVE-2026-93292: Improper Neutralization of Special Elements used in an SQL Command
SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate servicename and spanname fields into ClickHouse string literals without escaping. Authenticated attackers can inject SQL through funnel step definitions to execute...
CVE-2026-66625: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2025-55787
In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...
PT-2026-94274
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
PT-2026-94185
Name of the Vulnerable Software and Affected Versions Yo WordPress plugin versions 1.1 through 1.3.1 Description An issue exists where the software fails to sanitize or parameterize the username request parameter before incorporating it into a SQL query. Because the parameter is read before...
CVE-2025-55787
In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...