9341 matches found
PT-2026-21009
Name of the Vulnerable Software and Affected Versions Talentics versions through 20022026 Description A flaw exists in Talentics that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. The vendor was contacted regarding this issue but did not...
Kolay Talentics SQL注入漏洞
Kolay Talentics is a candidate tracking system and recruitment management platform developed by the Turkish company Kolay. Versions of Kolay Talentics from 2002 to 2026 and earlier had an SQL injection vulnerability. This vulnerability stemmed from improper handling of special elements within SQL...
PT-2026-21137
Name of the Vulnerable Software and Affected Versions TeconceTheme Woodly Core versions through 1.4 Description A flaw exists in TeconceTheme Woodly Core that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially all...
PT-2026-21134
Name of the Vulnerable Software and Affected Versions TeconceTheme Medinik Core versions through 1.3.6 Description A flaw exists in TeconceTheme Medinik Core medinik-core that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. Recommendations...
PT-2026-21148
Name of the Vulnerable Software and Affected Versions TeconceTheme Emerce Core versions through 1.8 Description A flaw exists in TeconceTheme Emerce Core that allows for Blind SQL Injection due to improper neutralization of special elements used in SQL commands. This issue affects the emerce-core...
PT-2026-21237
Name of the Vulnerable Software and Affected Versions Shahjada Download Manager Addons for Elementor versions through 1.3.0 Description The software contains a flaw due to improper neutralization of special elements within SQL commands, leading to a Blind SQL Injection condition. The vulnerabilit...
WordPress plugin Crete Core SQL注入漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...
PT-2026-21135
Name of the Vulnerable Software and Affected Versions TeconceTheme Nestbyte Core versions through 1.2 Description A flaw exists in TeconceTheme Nestbyte Core that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially...
WordPress plugin Saasplate Core SQL注入漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Coven Core SQL注入漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...
WordPress plugin JS Help Desk 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-21133
Name of the Vulnerable Software and Affected Versions TeconceTheme Electio Core versions through 1.4 Description The software contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a Blind SQL Injection condition. This allows for potential unauthoriz...
PT-2026-21238
Name of the Vulnerable Software and Affected Versions JoomSky JS Help Desk versions through 3.0.1 Description A flaw exists in JoomSky JS Help Desk js-support-ticket that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could...
PT-2026-21146
Name of the Vulnerable Software and Affected Versions don-themes Wolmart Core versions through 1.9.6 Description The software contains a flaw due to improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. This allows for Blind SQL Injection. Th...
CVE-2025-8055
Server-Side Request Forgery SSRF vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2...
CVE-2025-8055
OpenText XM Fax is affected by a Server-Side Request Forgery (SSRF) in version 24.2. The vulnerability permits blind SSRF to other systems reachable from the XM Fax server. The linked documents confirm the issue and affected product/version but do not provide exploitation details or a remediation...
CVE-2025-8055 SSRF vulnerability have been discovered in OpenText™ XM Fax
Server-Side Request Forgery SSRF vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2...
CVE-2025-59920
When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If the query URL is copied and opened in a new browser window, the ‘IDClient’ parameter is vulnerable to a blind authenticated SQL injection. If the request is made with the TWAdm...
CVE-2026-27472 SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites
SPIP before 4.4.9 allows Blind Server-Side Request Forgery SSRF via syndicated sites in the private area. When editing a syndicated site, the application does not verify that the syndication URL is a valid remote URL, allowing an authenticated attacker to make the server issue requests to arbitra...