CVE-2026-78270

An Author SQL Injection vulnerability affects the WordPress FluentCRM Pro plugin in versions 3.1.12 and below . Discovered by Ananda Dhakal (Patchstack), the flaw requires a high-privilege user to exploit (CVSS 7.6 HIGH , vector AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L), yielding high confidentiality ...

CVE-2026-78270 WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability

Author SQL Injection in FluentCRM Pro = 3.1.12 versions...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 안전하지 않은 비밀번호 재설정 메커니즘 → 전체 관리자 계정 탈취 데이터베이스에 저장된 평문 비밀번호 재설정 키 + SQL 인젝션 = 완전한 관리자 계정 탈취 📋 취약점 정보 항목| 세부 정보 ---|--- CVE ID| CVE-2026-5076 플러그인| ARMember – Membership Plugin & Content Restriction 영향받는 버전| Premium = 7.3.1 패치된 버전| 7.3.2 CVSS 점수| 9.8 Critical...

cmsms-sqli

CMS Made Simple = 2.2.9 Injection SQL CVE-2019-9053 - Exploit Python3 Port Python3 pur de l'original Exploit-DB 46635 par Daniele Scanu. SQLi aveugle basé sur le temps pour extraire les identifiants administrateur des installations vulnérables de CMS Made Simple. 🎯 Fonctionnalités : ✅ Aucune...

glpi-logbleed

glpi-logbleed Injection SQL aveugle dans le filtre de l'historique des journaux GLPI. CVE-2026-53629, corrigé en 11.0.8 et 10.0.26, cassé depuis 9.4.0. Nécessite un compte disposant du droit READ sur logs. Le profil Read-Only standard en dispose. Avis de sécurité : GHSA-cpcj-x335-5cmh Article :...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78244

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell — RCE pré-authentification dans WordPress Core Confusion de route dans l'API REST batch chaînée avec l'injection SQL CVE-2026-60137 TL;DR — Un attaquant non authentifié peut chaîner un bogue de routage par lot de l'API REST de WordPress avec une injection SQL dans WPQuery...

CVE-2026-78244

A SQL injection vulnerability exists in itsourcecode Real Estate Management System 1.0 , specifically in the file search.php . Manipulating the arguments search, delivery_type, search_price, or property_type allows an unauthenticated remote attacker to inject SQL, with no user interaction require...

EUVD-2026-64777

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

CVE-2026-78314

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78316

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78317

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78315

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentCRM Pro versions = 3.1.12...

Vulnerabilities present in Atlassian products

Atlassian has hidden vulnerabilities in various products such as Bamboo, Bitbucket, Confluence, Jira, Crowd, and Fisheye. These vulnerabilities exist in various third-party products for which updates have already been released. Atlassian has incorporated these updates into its own products...

wp2shell-vulnerability-scanner

WP2Shell Scanner Outil d'audit de sécurité non destructif et en lecture seule qui analyse les installations WordPress à la recherche de la chaîne de vulnérabilités wp2shell. Vue d'ensemble WP2Shell Scanner est un utilitaire bash qui recherche récursivement dans une arborescence de répertoires les...

CVE-2019-9053-Fixed

L'utilisateur assume l'entière responsabilité de toute action entreprise avec cet outil. Si ces conditions ne vous conviennent pas, veuillez ne pas utiliser cet outil. Utilisez-le uniquement dans des environnements où vous êtes autorisé à effectuer des activités de pentest. Corrections de bugs po...