Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/27 1:18 p.m.•15 views

CVE-2026-81676

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

8.8CVSS0.0047EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/27 12:08 p.m.•13 views

EUVD-2026-67012

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

8.8CVSS5.8AI score0.0047EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/27 12:08 p.m.•9 views

CVE-2026-81676 Multiple Vulnerabilities in TOOOLS' iSquad

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

8.8CVSS6AI score0.0047EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/27 12:08 p.m.•54 views

CVE-2026-81676 Multiple Vulnerabilities in TOOOLS' iSquad

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

8.8CVSS0.0047EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/27 12:08 p.m.•35 views

CVE-2026-81676

CVE-2026-81676 is an error-based SQL injection in TOOOLS' iSquad , affecting the endpoint /ws/apitribuna/ultimosVideos. The limit_videos parameter is directly concatenated into a MariaDB SQL query without sanitization or parameterization, allowing a remote, unauthenticated attacker to inject SQL ...

8.8CVSS6AI score0.0047EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•4 views

CVE-2026-81676: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...

8.8CVSS6AI score0.0047EPSS
SaveExploits0References2
Rows per page
Query Builder