CVE-2023-0630

CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - Inyección SQL de Suscriptor+ Requisitos sqlmap instalado y un nombre de usuario y contraseña válidos con suscriptor+ Uso usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message and exit -w URL,...

CVE-2026-42720

The Dynamic User Directory WordPress plugin (versions up to and including 2.4 ) is vulnerable to a Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute unauthorized database queries. No specific remediation...

EUVD-2026-94263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dynamic User Directory versions = 2.4...

EUVD-2026-94262

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1...

CVE-2026-42721 WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1...

CVE-2026-42721

The SERVIT Software Solutions affiliate-toolkit (affiliate-toolkit-starter) plugin for WordPress is vulnerable to Blind SQL Injection in versions n/a through 3.9.1 . This issue stems from the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). An attacker with high privil...

CVE-2026-42721 WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1...

WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin affiliate-toolkit versions = 3.9.1...

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.13...

CVE-2024-3094-info

CVE-2024-3094 信息 https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin 回应 https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - Inyección de comandos del sistema operativo Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that...

CVE-2012-2982

CVE-2012-2982 Este script de Python está escrito para la vulnerabilidad en Webmin 1.580, CVE-2012-2982. La vulnerabilidad existe en el componente /file/show.cgi y permite a un usuario autenticado, con acceso al Módulo de Administrador de Archivos, ejecutar comandos arbitrarios con privilegios de...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access 和 Identity Manager 通过 SSTI 的远程代码执行漏洞。 CVE-2022-22954 - SSTI 概念验证 用法： CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help 显示此帮助信息并退出 -m SETMODE, --mode SETMODE 可选模式：shodan | file | manual -i IP, --ip IP 主机 IP 地址 -c CMD, --cmd C...

CVE-2024-3495-POC

CVE-2024-3495-POC Country State City Dropdown CF7 WordPress 插件（版本最高至 2.7.2）存在 SQL 注入漏洞，漏洞位于 'cnt' 和 'sid' 参数中。SQL 查询中转义不足且缺乏预处理，允许未经身份验证的攻击者附加查询，可能提取敏感数据库信息。...

GPON

GPON家庭路由器上的RCE漏洞 CVE-2018-10561 漏洞描述 如今许多路由器使用GPON互联网，VPNMentor发现了一种绕过设备所有身份验证的方法（CVE-2018-10561 ）。利用此身份验证绕过，还可以揭示另一个命令注入漏洞（CVE-2018-10562 ）并在设备上执行命令。 根据Shodan的数据，撰写本文时，近一百万个此类设备暴露在互联网上。 所需依赖 requests urllib2 测试环境 Kali Linux Ubuntu 17.10 Server 使用方法 python gponrce.py TARGETURL COMMAND 例如 python...

CVE-2026-102782

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...

CVE-2026-107103

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...