Countersoft Gemini SQL injection xp_cmdshell RCE

After /account/login, stacked SQL in GetCustomFieldValue term enables xpcmdshell Windows, blind marker file. !/usr/bin/env python3 -- coding: utf-8 -- """Countersoft Gemini authenticated SQLi to xpcmdshell RCE.""" from future import annotations import re from urllib.parse import urlencode from...

Countersoft Gemini Authenticated SQL Injection to xp_cmdshell RCE — Detect

Fingerprint / reachability check for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE — Detect

Fingerprint / reachability check for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE""" from kittysploit import from lib.protocols.http.httpclie...

Telaeris XPressEntry Unauthenticated SQL Injection RCE — Detect

Fingerprint / reachability check for Telaeris XPressEntry Unauthenticated SQL Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Telaeris XPressEntry Unauthenticated SQL Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

Summary A SQL Injection vulnerability exists in the Third Party Company update functionality of Dolibarr ERP/CRM. The localtax1value parameter lt1 is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or...

GHSA-V5FQ-CF5M-VWV7 Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

Summary A SQL Injection vulnerability exists in the Third Party Company update functionality of Dolibarr ERP/CRM. The localtax1value parameter lt1 is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or...

cvebench-evidence

BountyKai on CVE-Bench — results & evidence 21 of 40 real-w...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injection ★ CVE-2026-0603 Hibernate SQL Injection PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Overview CVE-2026-0603 is a Second-Order SQL Injection vulnerability in Hibernate ORM , a widely used Ja...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

EUVD-2026-110823

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-65151

The NVIDIA NeMo Agent Toolkit is affected by a SQL injection vulnerability (CWE-89). An attacker could exploit this flaw to cause data tampering , denial of service , and information disclosure . The vulnerability has a CVSS 3.1 base score of 8.4 (High) with a local attack vector. No specific exp...

CVE-2025-6860

CVE-2025-6860 Exploit Tool A proof‑of‑concept command‑line tool in C for detecting and rudimentary exploiting the SQL injection vulnerability CVE‑2025‑6860 in staffcommision.php parameters fromdate & todate. Leverages libcurl for HTTP requests, rotates through common payloads & user‑agents, scans...

WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

SQL Injection vulnerability discovered by anhdung1329 in WordPress Plugin Motors versions = 1.4.126...

WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by AndrewN in WordPress Plugin BuddyPress versions = 14.5.2...

CVE-2026-102788

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts. When the parameter does not match known sorting keys, it ...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Post-Authenticated SQL Injection Exploit Title: WooCommerce Customers Manager 29.4 - Post-Authenticated SQL Injection Date: 2024-03-25 Exploit Author: Ivan Spiridonov - xbz0n Software Link:...

CVE-2026-102788

The Joomla Extension - balbooa.com (Gridbox) versions prior to 2.20.4.2 are vulnerable to an unauthenticated SQL injection . On store product list pages, the sort-by URL parameter is retrieved and passed to GridboxHelper::getBlogPosts(). If the parameter does not match known keys, it is prefixed ...

EUVD-2026-110645

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts. When the parameter does not match known sorting keys, it ...