CVE-2026-104389

The Sirv WordPress plugin versions up to and including 8.2.5 are vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation allows an attacker to execute arbitrary SQL commands. No specific exploit...

CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

EUVD-2026-92328

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-104408 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

EUVD-2026-92314

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

CVE-2026-104408

The Groundhogg WordPress plugin, affecting versions up to and including 4.8.3 , is susceptible to a Blind SQL Injection vulnerability. The root cause is the Improper Neutralization of Special Elements used in an SQL command. This flaw allows an attacker with high privileges to perform SQL injecti...

CVE-2026-104408 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

CVE-2023-42284

Отказ от ответственности Только для образовательных целей! Подробности Доказательство концепции для CVE-2023-42284. Tyk Gateway уязвим к SQL-инъекции. Исправлено в версии 5.0.7. Параметр URL 'apiversion' в "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..." уязвим к слепой...

CVE-2026-103352: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

PT-2026-106075

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

PT-2026-104767

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

CVE-2026-104389: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-103066: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0...

CVE-2026-104408: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

PT-2026-106169

Name of the Vulnerable Software and Affected Versions WP BASE Booking versions prior to 6.4.1 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database tr...

CVE-2025-65950

CVE-2025-65950: WBCE CMS уязвим для временной слепой SQL-инъекции через параметр groups Обзор Поле| Детали ---|--- CVE ID| CVE-2025-65950 Критичность| КРИТИЧЕСКИЙ Уведомление| Посмотреть уведомление Обнаружено| Lukasz Rybak Затронутые продукты WBCE/WBCECMS Детали Краткое описание Критическая...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc Неаутентифицированная time-based слепая SQL-инъекция blind SQLi proof of concept для конечной точки VERMAJAXfunctions.php VICIdial CVE-2024-8503. Проект предназначен только для авторизованного тестирования безопасности, валидации и обучения. Обзор CVE-2024-85...

CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Машина Hackthebox: CCTV Приложение: ZoneMinder Описание Выполнение множественных time-based blind-инъекций для одного и того же символа и выбор наиболее частого результата значительно снижает количество ошибок и повышает надёжность, хотя это занимает много времени...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder 블라인드 SQL 인젝션 PoC ZoneMinder의 CVE-2024-51428 을 악용하도록 설계된 sqlmap 용 Python 래퍼입니다. 이 도구는 블라인드 SQL 인젝션Blind SQL Injection 취약점의 탐지와 악용을 자동화하면서, 출력을 깔끔하게 유지하고 유용한 데이터에 집중합니다. 이 스크립트는 sqlmap 로그를 숨기고 다음과 같은 관련 정보만 표시합니다: 탐지된 인젝션 지점 데이터베이스 이름 테이블 덤프된 자격 증명 또는 민감한 데이터 따라서 이 도구는 C...