pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQLインジェクション SourceCodester Pharmacy Sales and Inventory System V1.0 純粋なPHP/MySQL版 CVE : CVE-2026-7392 エンドポイント : /ajax.php?action=deletesupplier idパラメータ 種別 : SQLインジェクション CWE-89 CVSS 3.1 : 6.3 中 作者 : oretnom23 SourceCodester, 2020-10-08...

CVE-2024-44541

CVE-2024-44541: Inventio Lite v4 における SQL インジェクションの脆弱性 説明 Inventio Lite v4 の /action=processlogin エンドポイントには、SQL インジェクション SQLi の脆弱性が存在します。この脆弱性により、攻撃者は POST リクエスト内の username パラメータを介して任意の SQL クエリを注入でき、不正アクセスやデータの抽出につながる可能性があります。 脆弱なコード 脆弱なコードは以下の通りです： if!isset$SESSION"userid" $user = $POST'username...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC まず、sqlmapをインストールする必要があります。 設定が必要です: 対象のドメインまたはIP あなたのクッキー その後、シェルを実行します。 sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

discuz-ml-rce

discuz-ml-rce 影響を受けるシステムとバージョン：Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 脆弱性の原因：Discuz!ML システムはcookie内のlで受け取ったlanguageパラメータの内容をフィルタリングしないため、文字列が連結され、PHPコードが実行されます。 cookieフィールド内にxxxxxxxxlanguageフィールドが現れます。根本原因はこのフィールドにインジェクションが存在し、RCEを引き起こすことです。 パケットキャプチャでcookieのlanguageの値を見つけ、次の値に変更します...

AlmaLinux 9.2 [TuxCare] Security Update: butane / butane-redistributable (ALMALINUX9.2:CLSA-2026:1772646645)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772646645 advisory. - Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1770112258)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1770112258 advisory. - Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1769786327)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769786327 advisory. - Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out...

CVE-2026-103321 MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image

MISP contains a stored cross-site script XSS vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side validation. On the client side, the stored value was rendered into an HTML img element's src attribute via string...

Rocky Linux 9.6 [TuxCare] Security Update: butane / butane-redistributable (ALMALINUX9.6:CLSA-2026:1772573053)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772573053 advisory. - Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

Grav: XSS Blueprint Validation Bypass via Twig String Concatenation

Summary The XSS blueprint validator Security::detectXss runs on the raw page content before Twig processing. An attacker can use Twig's string concatenation operator to dynamically construct an event handler name at render time. The validator sees "on" "error" - a harmless Twig expression - and...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

CVE-2026-32599

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...

CVE-2026-32599

Netmaker (a WireGuard network manager) is vulnerable to boolean-based SQL injection in its SQLite database layer. Prior to version 1.5.0 , the sqliteDeleteRecord function builds SQL DELETE statements via direct string concatenation of user-supplied input from the DELETE /api/dns/{network}/{domain...

CVE-2026-32599 Netmaker has a boolean‑based SQL Injection

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...

CVE-2026-32599 Netmaker has a boolean‑based SQL Injection

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...

CVE-2026-32599 Netmaker has a boolean‑based SQL Injection

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...

Netmaker has a boolean‑based SQL Injection

SQL Injection in Netmaker SQLite Database Backend Summary The sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection. --- Detai...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...