The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

CVE-2024-50971

CVE-2024-50971 Описание Уязвимость SQL-инъекции в print.php системы управления строительством Itsourcecode Construction Management System 1.0 позволяет удаленным злоумышленникам выполнять произвольные SQL-команды через параметр mapid. Тип уязвимости SQL-инъекция Производитель продукта Itsourcecod...

CVE-2022-34265

CVE-2022-34265 사용법 시작 root@kitploit: docker-compose build docker-compose up -d 중지 root@kitploit: docker-compose down Django 취약점 CVE-2022-34265 PoC 검증 2022년 7월 5일미국 시간에 Django의 취약점CVE-2022-34265이 공개되었습니다. 이 글은 이 취약점에 대한 논의와 검증 결과를 설명합니다. 취약점 요약 이 취약점은 Django에서 날짜 데이터에 사용되는 Trunc 및 Extract 함수의 인자에 ...

PT-2026-89878

CVE-2026-82583 CVSS 8.3 impacts Mirth Connect 4.7.1 and earlier. Authenticated users can execute arbitrary SQL via Database Connector, risking stored credential disclosure. Update if deployed. via NVD Recent High CVSS CyberSecurity InfoSec Vulnerability https://t.co/xBS3E6mUo3...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL 인젝션 CVE-2025-67644 는 langgraph-checkpoint-sqlite 패키지LangGraph / LangChain 생태계에 속함의 SQL 인젝션 취약점CWE-89입니다. 공격자는 SqliteSaver의 list / 메서드에 전달되는 를 통해 임의의 SQL을 주입할 수 있습니다...

sparx_hack

Множественные уязвимости в Sparx Pro Cloud Server и Enterprise Architect Эксплойт для выполнения произвольной SQL-команды на сервере Sparx PCS без аутентификации. ПРИМЕЧАНИЕ: ключ НЕ верен , чтобы помешать s|rIpt kIddi3 легко взломать ;- Полное описание:...

CVE-2026-76009 Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the NCWMKitconnect::run function. This is due to the plugin registering the /wp-json/nextcart/v1/migration REST route with permissioncallback se...

CVE-2025-59213

Эксплуатация неаутентифицированной SQL-инъекции в Microsoft Configuration Manager ConfigMgr / SCCM 2503 CVE-2025-59213 Этот скрипт эксплуатирует уязвимость CVE-2025-59213, которая позволяет неаутентифицированному злоумышленнику, имеющему сетевой доступ к точке управления, выполнять произвольные...

CVE-2024-50972

CVE-2024-50972 Описание Уязвимость SQL-инъекции в файле printtool.php системы управления строительством Itsourcecode Construction Management System 1.0 позволяет удаленным злоумышленникам выполнять произвольные SQL-команды через параметр borrowid. Тип уязвимости SQL-инъекция Производитель продукт...

CVE-2026-86123

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's...

SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

CVE: This vulnerability corresponds to CVE-2026-69084. Summary The /api/search/searchEmbedBlock endpoint passes a client-supplied SQL statement verbatim to the database with no validation. The endpoint is gated by CheckAuth only reachable by the publish RoleReader token, and by the anonymous...

CVE-2026-74820

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or...

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in PostgreSQL versions prior to 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20, and before 9.5.24. An attacker who has permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The...

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the jsonArrayContains function. An attacker can execute arbitrary SQL statements by supplying crafted input to the filter, which is incorporated into SQL queries without proper escaping. Remediation Upgrade...

GHSA-MQJF-5F49-2FJH GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...

CVE-2026-46682

BigBlueButton (open-source virtual classroom) is vulnerable to SQL injection in versions prior to 3.0.23 . The flaw resides in the refreshBreakoutRoomsVisibleForUsers method within BreakoutRoomUserDAO.scala, which interpolates meetingId and userId values directly into breakout room visibility que...

EUVD-2026-63677

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to inject SQL through the meetingId and userId values used by refreshBreakoutRoomsVisibleForUsers in akka-bbb-apps/src/main/scala/org/bigbluebutton/core/db/BreakoutRoomUserDAO.scala...

CVE-2026-55642

dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web authmiddleware in crates/dbx-web/src/auth.rs passes every protected request to the handler chain when passwordhash is None. A fresh deployment reaches that state when DBXPASSWORD is unset and no stored password exists...

CVE-2026-55642

In dbx-web before 0.5.51, auth_middleware in crates/dbx-web/src/auth.rs bypasses authentication when password_hash is None, which occurs on fresh deployments with DBX_PASSWORD unset. The service binds to 0.0.0.0:4224 by default, allowing unauthenticated attackers to call /api/connection/connect a...