CVE-2021-45041

CVE-2021-45041 CVE-2021-45041（又名 SCRMBT-177）的概念验证 – SuiteCRM = 8.0.0。默认为 False --help 显示此帮助信息并退出。 https://github.com/manuelz120/CVE-2021-45041 示例用法： .venv ➜ CVE-2021-45041 git:main ✗ ./exploit.py --host http://localhost --username user --password INFO:CVE-2021-45041:登录成功 - 尝试获取用户哈希值以检查 SuiteCRM...

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

CVE-2026-88854: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

EUVD-2021-34882

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the siteid GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based...

CVE-2021-48008 Chanjet CRM SQL Injection via get_usedspace.php

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the siteid GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based...

EUVD-2019-20203

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

CVE-2019-25776

Weaver E-cology is affected by an unauthenticated SQL injection vulnerability in the userIdentifiers GET parameter of the mobile plugin endpoint (SyncUserInfo.jsp). Attackers bypass space-based WAF filters by wrapping SQL keywords in parentheses, enabling UNION-based injection to extract sensitiv...

CVE-2023-54399

CVE-2023-54399 affects Hongjing e-HR versions before 8.2 , where the categories query parameter in the /servlet/codesettree endpoint is passed to a database query without sanitization after HRMS-encoding is stripped. This allows an unauthenticated remote attacker to use a crafted UNION SELECT pay...

EUVD-2023-60694

Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: fixed invalid accesses to cephconnectionv1info. There is a place where generic code in messenger.c reads from certain fields, and another place where it writes to members of the con-v1 union without checking that those...

Scary_POCs

CVE-2026-48842 - Roundcube Webmail SQL Injection PoC Fil...

K000163273: Linux kernel vulnerabilities CVE-2026-53393 and CVE-2026-53398

Security Advisory Description CVE-2026-53393 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsdvfswrite and nfsdcommit both call filemapcheckwberr to detect deferred writeback errors, but neither rotates the server's...

CVE-2026-87807

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

CVE-2026-87807 siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

EUVD-2026-74833

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

CVE-2026-87807

siyuan (a self-hosted knowledge management application) versions before v3.8.2 are affected by an SQL injection vulnerability in the fullTextSearchBlock endpoint via the method=1 query parameter. The description describes the flaw as requiring authentication, while the assigned CVSS vectors (3.1:...

CVE-2026-87807 siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

CVE-2026-87807 siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

PT-2026-88945

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

CVE-2026-87807: Improper Neutralization of Special Elements used in an SQL Command

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...