348 matches found
CLEANSTART-2026-NY38871 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n. See references for individual vulnerability details...
pharmacy-sqli-CVE-2026-7392
Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQL Injection SourceCodester Pharmacy Sales and Inventory System V1.0 pure PHP/MySQL version CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier id parameter Type : SQL Injection CWE-89 CVSS 3.1 : 6.3 Medium Author : oretnom23...
SQLInjection-Seguridad-Informatica
Seguridad en Redes LAN, Inalámbricas y Bases de Datos SQL Inj...
CVE-2022-37201
CVE-2022-37201 CVE-2022-37201 POC POC First of all you should install sqlmap you need set target domain or IP your cookie the run the shell sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...
CLEANSTART-2024-RY75079 buffer overflow when handling string concatenation in util_acl_to_str in tools/util
Security vulnerability affects the opensc package. A buffer overflow when handling string concatenation in utilacltostr in tools/util...
CLEANSTART-2026-WK17760 ParseAddress function constructs domain-literal address components through repeated string concatenation
CVE-2025-61725 affects multiple packages. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...
discuz-ml-rce
discuz-ml-rce Affected systems and versions: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Vulnerability cause: The Discuz!ML system does not filter the language parameter content received by l in the cookie, leading to string concatenation, thereby executing PHP code. The cookie field will contain an...
CVE-2024-44541
CVE-2024-44541: SQL Injection Vulnerability in Inventio Lite v4 Description Inventio Lite v4 is vulnerable to SQL Injection SQLi in the /action=processlogin endpoint. This vulnerability allows attackers to inject arbitrary SQL queries via the username parameter in POST requests, potentially leadi...
CLEANSTART-2026-ZF78377 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n. See references for individual vulnerability details...
CLEANSTART-2026-ZS62783 ParseAddress function constructs domain-literal address components through repeated string concatenation
CVE-2025-61725 affects multiple packages. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...
CLEANSTART-2026-QH27290 ParseAddress function constructs domain-literal address components through repeated string concatenation
CVE-2025-61725 affects multiple packages. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...
CLEANSTART-2026-GO88619 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
Security vulnerability affects the prometheus package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n...
CLEANSTART-2026-FA45918 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
Security vulnerability affects the prometheus package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n...
EUVD-2026-111399
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-112124 CVE-2026-78661 affecting package prometheus-adapter 0.12.0-12
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-111757 CVE-2026-78661 affecting package yq 4.45.1-1
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-111914 CVE-2026-78661 affecting package docker-buildx 0.14.0-19
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-111947 CVE-2026-78661 affecting package gh 2.102.0-2
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-111802 CVE-2026-78661 affecting package application-gateway-kubernetes-ingress 1.7.7-6
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-111980 CVE-2026-78661 affecting package influxdb 2.7.5-22
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...