CVE-2026-78197

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

EUVD-2026-64732

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=addtocart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The...

CVE-2026-78198

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the handling of the pid argument within /fos/admin/ajax.php?action=add_to_cart . The flaw is remotely exploitable with no authentication required , allowing an attacker to manipulate th...

CVE-2026-5076

CVE-2026-5076 - Vulnérabilité de réinitialisation de mot de passe ARMember Informations sur la vulnérabilité Élément| Détail ---|--- Identifiant CVE| CVE-2026-5076 Plugin| ARMember – Plugin d'adhésion et restriction de contenu Version affectée| Premium = 7.3.1 Version corrigée| 7.3.2 Score CVSS|...

CVE-2026-11349

Modern Events Calendar Lite = 7.33.0 — 認証不要のSQLインジェクション（meclistloadmore の attsinclude / attsexclude 経由） 概要...

CVE-2026-41490

CVE-2026-41490 — Injection SQL dans les gestionnaires d'E/S de base de données Dagster via les clés de partition dynamiques Sévérité : Élevée CVSS 8.x — AV:N/AC:L/PR:L/UI:N + C:H/I:H/A:H CWE : CWE-89 — Injection SQL Affecté : intégrations du gestionnaire d'E/S de base de données dagster —...

CVE-2026-78197 SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-78197

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/admin/ajax.php when the action=save_user parameter is set. Manipulating the Username argument allows an unauthenticated remote attacker to inject SQL, potentially leading ...

EUVD-2026-64731

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...

sqlmc

SQLMC - SQL Injection Massive Checker عرض توضيحي معلومات هذه الأداة لأغراض تعليمية فقط، استخدام SQLMC لمهاجمة أهداف دون موافقة متبادلة مسبقة هو غير قانوني. المطورون لا يتحملون أي مسؤولية ولا يكونون مسؤولين عن أي إساءة استخدام أو ضرر يسببه هذا البرنامج. نظرة عامة SQLMC SQL Injection Massive Checke...

Simple-CTF-Writeup

Simple-CTF-Writeup Rapport de résolution professionnel du CTF Simple de TryHackMe couvrant l'énumération, l'injection SQL dans CMS Made Simple CVE-2019-9053, la récupération d'identifiants, l'accès SSH, l'élévation de privilèges via Vim et la compromission root. TryHackMe - Rapport de résolution...

wp2shell-poc-fulljs

Démonstration du flux logique des CVE de WordPress Vue d'ensemble Ce projet permet de reproduire le flux logique lié aux CVE-2026-63030 et CVE-2026-60137, menant à une injection SQL servant de base pour finalement déclencher une RCE dans WordPress. CVE-2026-63030 CVE-2026-60137 La démonstration...

litellm-sqli-scanner

Scanner d'injection SQL LiteLLM CVE-2026-42208 — Injection SQL dans LiteLLM Proxy Détecte et valide la CVE-2026-42208 : vulnérabilité d'injection SQL dans la couche base de données de LiteLLM Proxy. Réservé aux tests de sécurité autorisés. Fonctionnalités Détection d'injection SQL CVE-2026-42208...

TarantuBench

TarantuBench v1 معيار لتقييم وكلاء الذكاء الاصطناعي في تحديات أمن الويب، تم توليده بواسطة محرك TarantuLabs. ما هذا؟ TarantuBench هي مجموعة من 100 تطبيق ويب قابل للاختراق، كل منها يحتوي على علم مخفي TARANTU.... مهمة الوكيل هي العثور على العلم واستخراجه من خلال التفاعل مع التطبيق عبر HTTP — تمامًا...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell سكريبت bash يوضح الاستغلال اليدوي لثغرة CVE-2016-10204 ضد نقطة نهاية مستهدفة، مما يؤدي إلى رفع غلاف ويب PHP. حاليًا، المتغير الخاص بـ webshell مضبوط لحمولة MySQL. يمكن استبداله بأي خلفية تحتاج استهدافها. مزيد من المعلومات حول هذه الثغرة يمكن العثور عليه في المصادر التالية:...

CVE-2026-78185

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-78182

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

CVE-2026-63030

Wordpress Core / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 Le PoC est maintenant publié. Il a été créé uniquement à des fins éducatives/de recherche ! Utilisez-le à vos propres risques !...

CVE-2026-36670

CVE-2026-36670 OpenSIPS Control Panel 에 대한 시간 기반 블라인드 SQL 인젝션 익스플로잇입니다. 이 익스플로잇은 OpenSIPS의 aliasmanagement.php 모듈 내에서 인증된 SQL 인젝션 취약점을 악용합니다. table GET 파라미터가 제대로 필터링되지 않아 공격자가 조작된 파생 테이블 페이로드를 삽입할 수 있습니다. 사전 요구사항 Python 3.x requests 라이브러리 pip install requests 사후 활용 이 익스플로잇은 관리자 사용자의 ha1 해시를 덤프합니다...