260148 matches found
ZeroDay vulnerabilities are exploited in GeoTools through OpenGeo
GeoTools, a widely used open-source Java library for geospatial data, has released updates to address the ZeroDay SQL injection vulnerability in the execution of OGC filter functions when used with JDBCDataStore and other data stores. This vulnerability is an older one, and it has recently been...
WordPress NEX-Forms plugin <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability
Authenticated Admin+ SQL Injection via 'additionalparams' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin NEX-Forms versions = 9.2.4...
WordPress Fullscreen Galleria plugin <= 1.6.12 - Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content vulnerability
Authenticated Contributor+ SQL Injection via 'href' Attribute in Post Content vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Fullscreen Galleria versions = 1.6.12...
WordPress WPML Multilingual CMS plugin <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter vulnerability
Authenticated Translator+ SQL Injection via 'sorting' Parameter vulnerability discovered by momopon1415 in WordPress Plugin Multilingual CMS versions = 4.9.5...
SafeLine v9.4.0
SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
Perfex-CRM-3.4.x-Unauthenticated-RCE-via-Migration-SQLi-Arbitrary-File-Upload
Perfex CRM Note: The Migration controller requires migra...
CVE-2026-75088
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-75089
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75086
A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2026-75087
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...
CVE-2026-75089 PHPGurukul Complaint Management System check_availability.php sql injection
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75089
PHPGurukul Complaint Management System 1.0 is affected by a SQL injection vulnerability in the file user/check_availability.php, triggered by manipulation of the email parameter. The vulnerability allows remote, unauthenticated exploitation over the network with low complexity. A public proof-of-...
EUVD-2026-60563
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75089
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-75089 PHPGurukul Complaint Management System check_availability.php sql injection
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
[SECURITY] Fedora 43 Update: sqlite-3.50.2-3.fc43
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
CVE-2026-75088 itsourcecode Hospital Management System viewbilling.php sql injection
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-75088
SQL injection exists in itsourcecode Hospital Management System 1.0 via the delid argument in /viewbilling.php, exploitable remotely with low privileges. CVSS 3.1 scores it Medium (6.3). Exploit details are not provided in the documents. No patch or workaround is mentioned. Monitor vendor for upd...
EUVD-2026-60562
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-75088
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...