CVE-2019-13027

CVE-2019-13027 Dettagli per la divulgazione di CVE-2019-13027 Cronologia contatti con il vendor: 1 luglio 2019 - Nessuna risposta, nessuna email di risposta. 4 luglio 2019 - Nessuna risposta, nessuna email di risposta. 8 luglio 2019 - Email inviata, Github creato. 11 luglio 2019 - Nessuna rispost...

bbqsql

BBQSQL Un tool di sfruttamento per SQL Injection cieca Indice Cos'è BBQSQL? Panoramica del Readme Utilizzo di alto livello Installazione Opzioni di BBQSQL Panoramica della sintassi delle query Parametri HTTP Esporta configurazione Importa configurazione Hook personalizzati Trovato un bug? Posso...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

Astra

Astra Il penetration testing delle API REST è complesso a causa dei continui cambiamenti nelle API esistenti e delle nuove API aggiunte. Astra può essere utilizzato da ingegneri della sicurezza o sviluppatori come parte integrante del loro processo, in modo da rilevare e correggere le vulnerabili...

BSQLinjector

BSQLinjector BSQLinjector utilizza il metodo blind per recuperare dati da database SQL. Raccomando di usare lo switch "--test" per vedere chiaramente come appare il payload configurato prima di inviarlo a un'applicazione. Opzioni: --file Obbligatorio - File contenente una richiesta HTTP valida e ...

CVE-2026-89304

The paymendo Bank Transfer WordPress plugin version 1.1 and below is vulnerable to unauthenticated blind SQL injection . The root cause is the failure to properly sanitize and escape the 'paymendo_bank_transfer_completed_payment' parameter before incorporating it into a SQL query. This flaw allow...

CVE-2026-89297 Loja Automática <= 1.0.0 - Unauthenticated SQLi via 'id' Parameter

The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-89299 WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter

The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-89302 Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-89299

The WP Verify API WordPress plugin, versions through 1.0.0 , contains a vulnerability where a parameter is not properly sanitized or escaped before being used in a SQL query . This flaw allows unauthenticated users to perform SQL injection attacks. Specifically, the 'verify' parameter is identifi...

CVE-2026-89297

The Loja Automática WordPress plugin (versions through 1.0.0 ) is vulnerable to SQL injection due to improper sanitization and escaping of a parameter before its use in a SQL query. This flaw allows unauthenticated users to perform SQL injection attacks, specifically via the 'id' parameter . The ...

CVE-2026-89287

The ASPL Product Quotation WordPress plugin, in versions up to and including 1.1.0 , is vulnerable to SQL injection . The root cause is the failure to sanitize and escape the 'quote_id' parameter before including it in SQL statements. This flaw allows unauthenticated attackers to perform SQL inje...

CVE-2026-89302

The Post Voting System WordPress plugin (versions up to and including 1.0 ) is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter before including it in a SQL query. This flaw allows unauthenticated users to perform SQL injection attacks, specifically via the...

CVE-2026-89305

The paymendo Bank Transfer WordPress plugin (versions through 1.1 ) is vulnerable to SQL injection due to improper sanitization and escaping of the 'orderBy' parameter before it is used in a SQL query. This flaw allows any authenticated user to perform SQL injection attacks. Specific details rega...

CVE-2026-89305 Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

CVE-2026-89287 ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter

The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...

EUVD-2026-96792

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

EUVD-2026-96790

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

EUVD-2026-96789

The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

EUVD-2026-96788

The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...