CVE-2026-105197

The LatePoint (Appointment Booking Plugin) for WordPress is vulnerable in versions before 5.6.5 . The software fails to verify if a backend staff user is authorized to act on a specific record during a deletion request. This Insecure Direct Object Reference (IDOR) flaw allows an authenticated use...

EUVD-2026-52275

SiYuan: Full-content disclosure of publish-disabled documents via getHeadingTransaction endpoints publish mode: reader-reachable rendered DOM with no publish-access check...

CVE-2026-68587

SiYuan has a information-disclosure vulnerability affecting versions before v3.7.3. The flaw lies in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints, which return rendered block DOM without publish-access checks. Consequently, anonymous reade...

EUVD-2022-47345

Malicious code in bioql PyPI...

Sql injection

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...

Dynamic Transaction Queuing System SQL注入漏洞

Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, a personal developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from the id parameter of its /admin/ajax.php?action=deletetransaction componen...

CVE-2022-46954

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deletetransaction...

CVE-2022-44402

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system from Carlo Montero's personal developer. version v1.0 of Automotive Shop Management System is vulnerable to SQL injection, which originates from /asms/classes/Master.php?f=deletetransaction missing validation of external...

CVE-2022-29745

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...

CVE-2022-29745

Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...

PT-2022-19812

Name of the Vulnerable Software and Affected Versions Money Transfer Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "Master.php" file, specifically through the f parameter set to delete transaction, which is located at the...