564012 matches found
CVE-2021-40512
CVE-2021-40512 OSCAR McMaster 19.401235 SQL Injection Vulnerability A SQL injection vulnerability exists in version 19.401235 of OSCAR McMaster. A malicious attacker can issue SQL commands to the MySQL/MariaDB database through the vulnerable sendTo parameter located on the...
CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
EUVD-2026-96323
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
CVE-2026-94676
The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...
EUVD-2026-96322
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-105885
The Slider by 10Web WordPress plugin (versions
CVE-2026-105885 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
D-Link
CVE-2024-10914 EjecuciΓ³n Remota de CΓ³digo RCE en D-Link D-Link NAS- InyecciΓ³n de Comandos a travΓ©s del ParΓ‘metro Name CVE-2024-10914:- Se encontrΓ³ una vulnerabilidad en D-Link DNS-320, DNS- 320LW, DNS-325 y DNS-340L hasta 20241028. Ha sido declarada como crΓtica. La funciΓ³n afectada por esta...
EXPLOITING-CVE-2024-27956
Python script that exploits CVE-2024-27956, a vulnerability in Wordpress that allows SQL Injection leading to Remote Code Execution...
CVE-2022-33891
γπ₯γCVE-2022-33891 Description The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...
CVE-2024-34327
CVE-2024-34327 SQL Injection Vulnerability Checker This script V-24-02-001SQLiCheck.py is a proof-of-concept PoC tool to verify the presence of a time-based blind SQL injection vulnerability affecting the password-reset-token.php endpoint, identified as CVE-2024-34327. β οΈ Disclaimer This tool is...
CVE-2026-108161
FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...
CVE-2026-108161
FusionPBX versions through 5.6.5 are vulnerable to an OS command injection in the call_recordings::download() function. When the record_name filename template is enabled, unauthenticated attackers can execute commands as the web server user by providing malicious Caller-ID values (e.g., using she...
EUVD-2026-96316
FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...
CVE-2026-108161 FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download
FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...
CVE-2026-108161 FusionPBX through 5.6.5 OS Command Injection via Caller ID in Recording ZIP Download
FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...
CVE-2023-3163-SQL-Injection-Prevention
CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...
exploit_CVE-2022-26134
exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This script can find vulnerable server for CVE-2022-26134 from Shodan Search Engine. Just need to ent...
CVE-2021-31856
Vulnerability Report CVE-2021-31856: a sql injection in Meshery item| details| note ---|---|--- project| https://github.com/layer5io/meshery| date announced| 2021-04-28| CVE-ID| CVE-2021-31856| https://vulners.com/cve/CVE-2021-31856 EDB-ID| | Vulnerable Version| v0.5.2| \ Patched Version| v0.5.3|...
CVE-2017-12611_Exploit
CVE-2017-12611 Project Overview: A RCE attack is possible with the given payload. Environment & Tools The following lists the environments and tools for testing and validation in an isolated, personal lab. Host OS : Ubuntu 18.04.6 Attacker OS : Kali Linux Container Platform : Docker Target...