PT-2025-62904

Уязвимость платформы защищённого обмена данными MFlash связана с непринятием мер по защите структуры SQL-запроса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнять произвольные SQL-запросы...

CVE-2025-62422

DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in...

CVE-2025-62422: Improper Neutralization of Special Elements used in an SQL Command

DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in...

CVE-2025-56316

A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...

CVE-2025-56700: Improper Neutralization of Special Elements used in an SQL Command

Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...

E-Commerce Website product_add_qty.php file SQL injection vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter prodid in file /pages/productaddqty.php. An attacker can exploit this vulnerability to execu...

PT-2025-53307

Уязвимость программного решения для комплексного управления предприятием Idea Platform Service Manager связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный SQL-код...

PT-2025-54600

Уязвимость платформы для обучения Knomary TMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные SQL-запросы...

CVE-2025-40886 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

EUVD-2011-0024

Malware in sbrugna...

EUVD-2008-0700

Malware in sbrugna...

EUVD-2008-2622

Malware in sbrugna...

EUVD-2017-16434

Malware in sbrugna...

EUVD-2017-15606

Malware in sbrugna...

EUVD-2015-8828

Malware in sbrugna...

EUVD-2014-4855

Malware in sbrugna...

EUVD-2011-5171

Malware in sbrugna...

EUVD-2014-2251

Malware in sbrugna...

EUVD-2012-4526

Malware in sbrugna...

EUVD-2012-5272

Malware in sbrugna...