CVE-2020-2969

CVE-2020-2969 The PoC for CVE-2020-2969 is documented here: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

CVE-2024-57430

CVE-2024-57430 An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQL Injection Details Field| Info ---|--- CVE ID| CVE-2026-37749 Type| SQL Injection → Authentication Bypass Severity| Critical CVSSv3: 9.8 Vendor| CodeAstro Product| Simple Attendance Management System Version| 1.0 Discoverer|...

CVE-2024-42327

Write-up CVE-2024-42327 Zabbix Vulnerability Target: 10.129.231.176 Information: I know my target is a Zabbix server. I received a default user account to log into Zabbix: user matthew passwd 96qzn0h2e1k3. This account is a default user, without additional groups or privileges. As usual, we start...

CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...

reconkg

reconkg A vulnerability triage tool. It takes what a scan already found, works out which CVEs plausibly apply, tells you how confident it is and why, and gives you the commands to check for yourself. It does not scan anything, and it does not exploit anything. Install on Kali git clone...

CVE-2026-22599

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-22599 Write-up: https://abraxaslabs.tech/research/CVE-2026-22599 CVE-2026-22599 Strapi 5.33.1 - Strapi I am @abraxasnull. Loopback lab. CVE-2026-22599-Abraxas-Labs.py chdirs into lab/ and runs run.sh...

CVE-2026-96633

AdminNeo allows an authenticated SQLite-mode user to delete arbitrary files writable by the PHP process through the database-list drop action. The SQLite driver validates file extensions when creating or renaming databases, but the database-list drop path passes submitted "db" values directly to...

CVE-2026-96632

AdminNeo inserts the database server's version string into a "" tag that carries a valid CSP nonce, without any sanitization. A rogue database server can return a crafted version string that breaks out of the JavaScript context and executes arbitrary code. Because the script tag already has a val...

CVE-2025-29529

SQLi ITC Multiplan CVE-2025-29529 Discovery On February 21, 2025, an SQL injection vulnerability was identified in the “Multiplan” platform developed by ITC Systems during a client engagement. Affected Versions This vulnerability has been only been tested on v3.7.4.1002 Attack Vector The...

CVE-2026-42569

🚨 CVE-2026-42569 - phpVMS Unauth Database Wipe Unauthenticated Database Wipe / Destructive Import in phpVMS 📌 Overview CVE-2026-42569 is a critical vulnerability in phpVMS Virtual Airline Management System that allows unauthenticated attackers to access legacy import endpoints. These endpoints we...

CVE-2026-119163: teamfunnelkit FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce: The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is…

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...

PT-2026-134480

Name of the Vulnerable Software and Affected Versions Newsletters plugin for WordPress versions prior to 4.18.2 Description Authenticated attackers with subscriber-level access and above can perform a time-based SQL Injection. This occurs due to insufficient escaping of the user-supplied id...

Linux Distros Unpatched Vulnerability : CVE-2026-114508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive...

PT-2026-134457

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfan cart id' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...

PT-2026-134500

Name of the Vulnerable Software and Affected Versions WP Directory Kit versions prior to 1.6.1 Description An issue exists where unauthenticated attackers can perform SQL Injection, a technique used to interfere with the queries that an application makes to its database. This occurs due to...

PT-2026-134472

Name of the Vulnerable Software and Affected Versions WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps versions prior to 5.5.89 Description An issue exists that allows unauthenticated attackers to extract all rows and columns from the database table associated with any...

CVE-2026-101325: contrid Newsletters: The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions…

The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 4.18.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2026-109197: wpdirectorykit WP Directory Kit: The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all…

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including, 1.6.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2026-110023: peterschulznl: The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to…

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.88 via the 'reltab' parameter. This makes it possible for unauthenticated attackers to extract every row and...