1172 matches found
PT-2025-42104
Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An issue exists in Microsoft Configuration Manager where improper neutralization of special elements in SQL commands allows an attacker to inject malicious SQL code...
CVE-2025-62389
CVE-2025-62389 is a SQL injection vulnerability in Ivanti Endpoint Manager. The vulnerability allows a remote authenticated attacker to read arbitrary data from the database. Multiple connected advisories confirm this family of SQL injection issues affects Ivanti Endpoint Manager and note a remed...
CVE-2025-61911 python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...
EUVD-2025-25456
Keycloak Potential Variable Reference in Model Storage Services...
Keycloak Potential Variable Reference in Model Storage Services
A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...
GHSA-8HXP-QMPH-W5GQ Keycloak Potential Variable Reference in Model Storage Services
A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...
CVE-2025-60311
ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page...
PT-2025-41230
Name of the Vulnerable Software and Affected Versions Find Me On WordPress plugin versions through 2.0.9.1 Description The Find Me On WordPress plugin does not properly sanitize and escape a parameter before using it in a SQL query. This allows users with subscriber privileges or higher to execut...
CVE-2025-11357
The CVE-2025-11357 entry concerns code-projects Simple Banking System 1.0, with a SQL injection in the /createuser.php endpoint via the Name parameter due to insufficient input validation. Public exploitation is indicated, and remote initiation is possible. Multiple connected sources corroborate ...
EUVD-2004-0338
Malware in sbrugna...
EUVD-2017-7387
Malware in sbrugna...
EUVD-2001-1205
Malware in sbrugna...
EUVD-2018-3348
Malware in sbrugna...
EUVD-2021-23609
Malware in sbrugna...
EUVD-2019-9333
Malware in sbrugna...
EUVD-2017-10190
Malware in sbrugna...
EUVD-2017-14087
Malware in sbrugna...
EUVD-2017-2479
Malware in sbrugna...