Lucene search
+L

9344 matches found

Vulnrichment
Vulnrichment
added 2026/01/27 3:23 p.m.7 views

CVE-2020-36951 Phpscript-sgh 0.1.0 - Time Based Blind SQL Injection

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to...

8.8CVSS5.9AI score0.00308EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/27 3:23 p.m.6 views

CVE-2020-36951

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to...

8.8CVSS5.9AI score0.00308EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/27 3:23 p.m.33 views

CVE-2020-36947 LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL Injection

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve...

7.1CVSS0.00415EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.11 views

PT-2026-4926

Name of the Vulnerable Software and Affected Versions LibreNMS version 1.46 Description LibreNMS version 1.46 contains an authenticated SQL injection issue in the MAC accounting graph endpoint. This allows remote attackers to extract database information by manipulating the sort parameter with...

7.1CVSS5.7AI score0.00415EPSS
SaveExploits1References10
EUVD
EUVD
added 2026/01/26 7:35 p.m.11 views

EUVD-2025-206347

Blind Server-Side Request Forgery SSRF in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information...

5.1CVSS5.9AI score0.00252EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/26 7:35 p.m.29 views

CVE-2025-9522 Blind Server-Side Request Forgery (SSRF) in Omada Controller

Blind Server-Side Request Forgery SSRF in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information...

5.1CVSS0.00252EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/01/26 6:30 a.m.193 views

-all-xss-payloads

-all-xss-payloa...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.9 views

CVE-2026-24572

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.2.0...

8.5CVSS5.9AI score0.00333EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 p.m.14 views

CVE-2026-24624

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through = 1.0...

7.6CVSS5.6AI score0.00321EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.23 views

CVE-2025-69180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a through = 6.7...

8.5CVSS5.6AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.10 views

CVE-2025-49050

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through = 2.5...

8.5CVSS5.6AI score0.00384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.10 views

CVE-2025-49055

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through = 2.5...

9.3CVSS5.6AI score0.00387EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.12 views

CVE-2025-68017

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Antideo Antideo Email Validator antideo-email-validator allows Blind SQL Injection.This issue affects Antideo Email Validator: from n/a through = 1.0.10...

7.5CVSS5.6AI score0.00344EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.12 views

CVE-2025-68857

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ichurakov Paid Downloads paid-downloads allows Blind SQL Injection.This issue affects Paid Downloads: from n/a through = 3.15...

9.3CVSS5.6AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.12 views

CVE-2025-68999

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through = 3.20.4...

8.5CVSS5.6AI score0.00263EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.11 views

CVE-2026-24367

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.8...

8.5CVSS5.6AI score0.00213EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.11 views

CVE-2026-22470

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FireStorm Plugins FireStorm Professional Real Estate fs-real-estate-plugin allows Blind SQL Injection.This issue affects FireStorm Professional Real Estate: from n/a through = 2.7.11...

7.6CVSS5.6AI score0.0029EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.21 views

CVE-2026-24624

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through = 1.0...

7.6CVSS0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.10 views

CVE-2026-24572

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nelio Software Nelio Content nelio-content allows Blind SQL Injection.This issue affects Nelio Content: from n/a through = 4.2.0...

8.5CVSS0.00333EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.5 views

CVE-2026-24624

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through = 1.0...

7.2CVSS5.9AI score0.00321EPSS
SaveExploits0References2
Rows per page
Query Builder