CVE-2026-28363

🔴 CVE-2026-28363 — Security Advisory ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗ ██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝ ███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗...

CVE-2026-25746_SqlInjectionVulnerabilityOpenEMR7.0.4

CVE-2026-25746 - Vulnerabilidad de inyección SQL en OpenEMR Debilidad CWE-89 Neutralización incorrecta de elementos especiales utilizados en un comando SQL 'Inyección SQL' El producto construye todo o parte de un comando SQL utilizando entrada influenciada externamente desde un componente upstrea...

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices Can conveniently output JSON Installation Packages Linux Arch Linux: pacman -S duf Ubuntu 22.0...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 es una vulnerabilidad de use-after-free en el motor jscript heredado. Se puede desencadenar en Internet Explorer. El exploit aquí está escrito por maxpl0it pero la vulnerabilidad en sí fue descubierta por Qihoo 360 siendo utilizada en estado salvaje. Este exploit...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 PoC de Inyección SQL no autenticada -blue Atacantes no autenticados pueden inyectar SQL arbitrario en la cláusula ORDER BY a través del parámetro sort del endpoint render-map de Geo Mashup, permitiendo la extracción ciega basada en tiempo de información sensib...

CVE-2022-23614

CVE-2022-23614 PoC for CVE-2022-23614, GHSA-5mv2-rx3q-4w2v Twig sort filter code execution/sandbox bypass As seen in this commit - https://github.com/twigphp/Twig/commit/.., twig was passing user supplied function name as a callback parameter to uasort here, thus leading to arbitrary code executi...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

BIT-MONGODB-2026-9737 Find command with $meta sort can lead to crash

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

Exploit CVE-2021-36396 Descripción Este repositorio contiene un exploit basado en Python dirigido a CVE-2021-36393, una vulnerabilidad grave encontrada en la función de cursos recientes de Moodle. El fallo reside en el parámetro 'sort', permitiendo ataques de inyección SQL que pueden conducir a u...

CVE-2021-43609-POC

Spiceworks Sort SQLi Hay una SQLi en un parámetro sort de Spiceworks. La cadena completa de explotación es SQLi - lectura de archivos - RCE. Demo Requisitos previos apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce ...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC que explota la inyección SQL en el Proveedor de Descargas de Android en el parámetro sort CVE-2019-2196 Aviso de seguridad Inyección SQL en el parámetro de ordenación de consultas del Proveedor de Descargas de Android AOSP CVE-2019-2196 Demo...

Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

dogtag-pki security update

11.9.0-5.0.1 - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. 11.9.0-5 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 es una vulnerabilidad de use-after-free en el motor jscript heredado. Se puede activar en Internet Explorer. El exploit aquí está escrito por maxpl0it, pero la vulnerabilidad en sí fue descubierta por Qihoo 360 al ser utilizada en ataques reales. Este exploit simplemen...

Security Bulletin: IBM DataPower Gateway affected by denial of service due to Coreutils (CVE-2025-5278)

Summary CVE-2025-5278 addressed in IBM DataPower Gateway version 11.0.0.3 Vulnerability Details CVEID:CVE-2025-5278 DESCRIPTION: A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated...

CVE-2022-23614

CVE-2022-23614 Proof of concept PoC for CVE-2022-23614 referenced in the DSA-5107-1. CVSS-2.0 : 7.5 CVSS-3.X : 9.8 Explanation Twig is a flexible, fast, and secure template engine for PHP. Notably, it is possible to use filters in a template before rendering it. The sort filter can be used to sor...

CVE-2008-4687-exploit

CVE-2008-4687-exploit Quick and dirty python exploit for CVE-2008-4687. Description by NIST: manageprojpage.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by createfunction within the...

CVE-2025-32429

CVE-2025-32429 PoC de Inyección SQL en XWiki Autor: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerabilidad: Inyección SQL Ciega en la API REST de XWiki LiveData Archivo Afectado: getdeleteddocuments.vm parámetro sort Descripción : Existe una vulnerabilidad de Inyección SQL Ciega en...

CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm

CVE-2026-85046 Saw the other POC of this and I thought to myself this is such a nightmare to look at. So I went and simplified the POC and added a jump to your own wasm. Because wasm. Chrome 152.0.7977.75 can confuse object pointers with integers during sort. poc.js keeps a stale Wasm module...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the getSortColumn process. An attacker can access sensitive database column names and manipulate the ordering of query results by supplying arbitrary values to the sort parameter, which are not validated against...