CVE-2026-82526 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

CVE-2026-41462

🚨 CVE-2026-41462 - ثغرة حقن SQL غير مصادقة في ProjeQtor ثغرة حقن SQL حرجة غير مصادقة في ProjeQtor الإصدار 12.4.3 فما دون 📌 نظرة عامة تمثل CVE-2026-41462 ثغرة حقن SQL حرجة غير مصادقة في وظيفة تسجيل الدخول بأداة إدارة المشاريع ProjeQtor. معرف CVE : CVE-2026-41462 الإصدارات المتأثرة : ProjeQtor 7.0...

CVE-2021-30486

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp GET computerID, AssetManagementChart.jsp POST group1, AssetManagementList.jsp GET computerID or group1, or AssetManagementSummary.jsp GET group1...

SolarWinds Orion Service - SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...