CVE-2026-102135 Kiteworks Email Protection Gateway Deserialization of Untrusted Data

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

CVE-2026-102135 Kiteworks Email Protection Gateway Deserialization of Untrusted Data

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

SUSE CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

CVE-2026-94115

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

CVE-2025-26198

CVE-2025-26198 - Demostración de Inyección SQL Proyecto académico ENSIMAG - Seguridad 3A Autores: Wail Yacoubi, Mohammed-Yassine Akhmari Fecha: Enero 2026 Advertencia Este código es intencionalmente vulnerable con fines educativos. Nunca desplegar en producción. Descripción Reproducción de...

CVE-2026-92938

A flaw was found in vm2. Untrusted code running within the sandbox environment can bypass isolation restrictions when the host SQLite module is accessible. By crafting module import requests and loading native database extensions, an attacker can escape the sandbox and achieve arbitrary code...

CVE-2026-102456

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

CVE-2026-102456 DigiWin｜EasyFlow .NET - SQL Injection

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

CVE-2026-102456 DigiWin｜EasyFlow .NET - SQL Injection

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

EUVD-2026-89712

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

CVE-2026-102456

The EasyFlow .NET application, developed by Digiwin , contains an SQL Injection vulnerability. This flaw allows authenticated remote attackers to inject arbitrary SQL commands, which can be used to read database contents . No specific remediation or exploit details are provided in the documents.

EUVD-2026-89671

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'datafieldslist' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-6806 Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-51936

A flaw was found in SQLCipher. An attacker with local access can bypass defensive security restrictions and cause database corruption by supplying a crafted source database name to the sqlcipherexport function. Because defensive restrictions are temporarily relaxed during export operations,...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

EUVD-2026-89468

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

CVE-2026-51936

Zetetic SQLCipher versions prior to 4.15.0 are vulnerable to SQL injection via the sqlcipher_export convenience function. This function, which is primarily used to copy database contents or convert between plaintext and encrypted formats, temporarily disables defensive restrictions to perform dyn...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

EUVD-2026-89542

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...