238030 matches found
CVE-2026-72899
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...
EUVD-2026-55691
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...
CVE-2026-72899
Metabase is affected by CVE-2026-72899: an unauthenticated SQL injection via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. The flaw enables arbitrary SQL injection through the field-filter input; exploitation details are not provided beyond access to a pub...
EUVD-2026-55690
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
CVE-2026-72898 Metabase SQL injection via password reset endpoint
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
CVE-2026-72898
Metabase is affected by CVE-2026-72898: an unauthenticated attacker can inject arbitrary SQL through the /reset_password endpoint, forging an administrator session and gaining full access to the Metabase instance. The root cause, as described in PoC materials, is that the password-reset API accep...
CVE-2026-72898
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
CVE-2026-72898 Metabase SQL injection via password reset endpoint
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...
EUVD-2026-55671
Discourse is an open-source discussion platform. From 2026.1.0-latest until 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, anyone able to run a parameterized Data Explorer query, including non-staff members of a group a query is shared with, could craft parameter values that escaped the...
CVE-2026-72731
Discourse vulnerability CVE-2026-72731 affects 2026.1.0-latest through 2026.8.0-latest.1, including the Data Explorer query path and plugin data_explorer code, where parameterized Data Explorer queries could be crafted to escape the intended query via non-recursive and recursive parameter interpo...
FreePBX - Remote Code Execution
FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. id: CVE-2025-57819 info: name: FreePBX - Remote Code...
Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)
Summary A remote code execution vulnerability exists in the SQL Interface component of IBM Informix Dynamic Server. An admitted SQL Interface client can send a specially crafted request to cause a stack-based buffer overflow. Vulnerability Details CVEID:CVE-2026-13361 DESCRIPTION: IBM Informix...
CVE-2026-63106
ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...
CVE-2026-63106
ReadyEcommerce prior to 4.5.2 exposes an unauthenticated SQL injection in the product listing API: the rating parameter is concatenated into a MySQL HAVING clause in ProductController.php, enabling time-based blind SQL injection to exfiltrate full database contents (including user credentials and...
CVE-2026-63106
ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...
Inside the Metabase SQLi: Exploited in the Wild
Reverse engineering Metabase CVE-2026-72898 with AI to accelerate defense...
WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dutafi in WordPress Plugin WPJAM Basic versions = 7.0.1...
CVE-2026-72565
A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...