EUVD-2026-64750

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

CVE-2026-77994

Page Builder CK (version

CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction

CVE-2024-1698 – Injection SQL par NotificationX Aveugle basée sur le temps Injection SQL aveugle basée sur le temps non authentifiée → Extrait le nom d'utilisateur et le hash du mot de passe administrateur de WordPress. 🧠 Aperçu de la vulnérabilité Les versions 2.8.2 et antérieures de Notificatio...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — Injection SQL NocoBase → RCE superutilisateur PostgreSQL Injection SQL dans l'action myInAppChannels:list du plugin @nocobase/plugin-notification-in-app-message de NocoBase ≤ 2.0.60. Le paramètre de requête filterlatestMsgReceiveTimestamp$lt est interpolé directement dans une...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 Preuve de concept d'injection SQL non authentifiée -blue Des attaquants non authentifiés peuvent injecter du SQL arbitraire dans la clause ORDER BY via le paramètre sort du point de terminaison render-map de Geo Mashup, permettant l'extraction aveugle basée su...

laravel-threat-detection

Laravel Threat Detection كشف تطفل سلبي لـ Laravel — راقب كل حقن SQL و XSS والماسحات الضوئية وفحوصات الروبوتات التي تصل إلى تطبيقك، مع تسجيل كامل السياق. إنه نظام IDS وليس WAF: فهو لا يحظر طلبًا أبدًا، ولا يفلتره، ولا يعدّله. أضِفه إلى أي تطبيق Laravel 10–13 وسيبدأ بفحص كل طلب HTTP مقابل أكثر من 1...

CVE-2026-78201

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...

CVE-2026-78200

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78199

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...

CVE-2026-78198

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=addtocart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The...

EUVD-2026-64740

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...

CVE-2026-78201

CVE-2026-78201 is a SQL injection vulnerability in itsourcecode Payroll System 1.0 , specifically in the Login function of admin_class.php . The Username parameter is vulnerable to unsanitized input, allowing a remote, unauthenticated attacker to inject arbitrary SQL. The CVSS 3.1 score is 7.3 (H...

EUVD-2026-64734

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78200 itsourcecode Library Management System editbooks.php sql injection

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2026-78200

itsourcecode Library Management System 1.0 is affected by a SQL injection vulnerability in the file editbooks.php . Manipulating the ID argument in an unknown function of this file allows a remote attacker to inject SQL queries. The CVSS 3.1 base score is 6.3 (MEDIUM) with low impact on confident...

EUVD-2026-64733

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...

CVE-2026-78199 SourceCodester Simple Online Food Ordering System view_prod.php sql injection

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...

CVE-2026-78199

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/view_prod.php . Manipulation of the ID argument allows a remote attacker to execute arbitrary SQL queries without authentication. The impact is rated CVSS 3.1 7.3 (HIGH) w...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX SQLi pré-authentification vers RCE Un exploit tout-en-un pour CVE-2025-57819 , une injection SQL non authentifiée dans le module endpoint de FreePBX menant à une exécution de code à distance via injection de tâches cron. CVSS : 9.8 Critique —...

sxwp2shell

root@kitploit: / / / / / / | |/ / \ / / / / / / / / | / / / / / / / // / / / / / // | //// ///// /////|| sxwp2shell — Exploit RCE sans authentification pour WordPress via une confusion de routes batch de l'API REST CVE-2026-63030 + injection SQL CVE-2026-60137. Versions concernées : WP...