CVE-2026-94539: Improper Neutralization of Special Elements used in an SQL Command

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sortby' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-96267: Improper Neutralization of Special Elements used in an SQL Command

The WP Visitor Statistics Real Time Traffic plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

PT-2026-104529

Name of the Vulnerable Software and Affected Versions SaveTo Wishlist Lite versions prior to 1.1.5 Description An issue exists where parameters are not sanitized or escaped before being used in the ORDER BY clause of a SQL query. This allows unauthenticated attackers to append additional SQL...

CVE-2026-92923: Improper Neutralization of Special Elements used in an SQL Command

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low as subscriber to perform blind SQL injection attacks and read arbitrary data from the database. Version 2.0.18 removed...

CVE-2026-18443: Improper Neutralization of Special Elements used in an SQL Command

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'accessprivileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVE-2023-37941

SupersetのデフォルトキャッシュにおけるPickle RCEの悪用 情報 著者 Dinis Cruz プロジェクト Superset 説明 Apache Supersetはキャッシュのためのさまざまなオプションを提供しており、そのすべてはFlask-Cachingに基づいています。組み込みキャッシュが提供されており、値をシリアライズして後で取得できるようにします。このシリアライゼーションと取得はPickleを使用して行われ、Pythonオブジェクトのデシリアライゼーションを可能にし、その結果コードの実行が可能になります。...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer の脆弱性 悪意のある MySQL サーバーを介した任意のファイル読み取り 1. Adminer とは？ Adminer は、MySQL、PostgreSQL、SQLite、SQL Server のデータベースを簡単に管理できる Web ツール（PHP）です。軽量な phpMyAdmin の代替としてよく使われます。 影響を受けるバージョン: Adminer ≤ 4.6.2 2. 脆弱性の本質は？ 2.1. アクセス制御の欠陥 Adminer は 任意のリモート MySQL サーバー への接続を許可します。しかし、MySQL...

CVE-2026-94592

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-94593

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available...

CVE-2026-94592 Armatura LLC Armatura One Use of Hard-coded Credentials

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-94592

The Armatura One platform contains a vulnerability where the database initialization routine assigns a fixed, vendor-defined password to the database superuser account instead of generating a unique one. An attacker with server operating system access and knowledge of this hard-coded value can au...

CVE-2024-49681

CVE-2024-49681 WP Sessions Time Monitoring Full Automatic = 5.0.12 time-based blind query SLEEP Payload: action=activitytimeaction&uri=test Parameter: uri POST Type: error-based Title: MySQL...

CVE-2022-31890

CVE-2022-31890 for osTicket | サポートチケットシステム ニックネーム: python nickname.py The output of the first nickname in the table. パスワード: python password.py The output of the first password in the table. ファイルに出力: python dumpFile.py cat dump.txt || nickname::password コンソールに出力: python dumpConsole.py Output to...

ICE Has Been Dumping Protester Photos Into a Palantir Database

DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a database run on Palantir software, newly unsealed court filings say...

CVE-2014-125130

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

EUVD-2014-9822

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2014-125130 CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2014-125130 CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read via direct_download.php

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — SiYuan 任意 SQL 执行与 SQL 注入 CVE-2026-69084: 通过 /api/search/searchEmbedBlock 执行任意 SQL CVE-2026-69085: 通过 /api/filetree/searchDocs 进行 SQL 注入 CVSS 9.9（严重） 每个 · CWE-89 · SiYuan --check 2. 数据库写入证明：CREATE TABLE + INSERT python3 CVE-2026-69084.py http://TARGET:6806 --auth...

CVE-langgraph

cve-id ⚡ 简单用法 仅在安全且经授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例设置： git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash / WSL source venv/Scripts/activate...