5026 matches found
CVE-2026-73533: Embedded Malicious Code
Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...
CVE-2026-66436: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
PT-2026-71690
Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...
PT-2026-71553
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
WordPress Ninja Tables Pro plugin 5.2.11 - Backdoor vulnerability
Backdoor vulnerability discovered by ? in WordPress Plugin Ninja Tables Pro versions 5.2.11...
CVE-2026-17419: Improper Neutralization of Special Elements used in an SQL Command
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...
CVE-2026-58241
Technical details about CVE-2026-58241 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-72565
A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...
EUVD-2026-55241
A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...
SUSE CVE-2026-64561
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
CVE-2026-18032
The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected...
Exploit for CVE-2023-30000
Building And Configuring The instructions below were tested u...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...
WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Active Products Tables for WooCommerce versions = 1.1.1...
CVE-2026-61964
Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...
CVE-2026-61964
Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...
EUVD-2026-53959
Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...
CVE-2026-61964 WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...
