CVE-2026-9209

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin...

CVE-2026-9209

Versions of mJobTime through build 15.7.3.32 are vulnerable to an unauthenticated SQL execution vulnerability within the Login.aspx admin panel handlers. Specifically, the runQueryButton postback and exportSqlQuery_Server PageMethod fail to enforce server-side authentication, relying instead on a...

CVE-2026-9209 mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin...

EUVD-2026-95035

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin...

CVE-2026-9209: Missing Authentication for Critical Function

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin...

PT-2026-108030

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuery Server PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin...

Ivanti Neurons ITSM CVE-2026-12645 Detect

Detects Ivanti Neurons for ITSM formerly HEAT Service Management instances likely affected by CVE-2026-12645/12646/12647 missing authorization RCE and CVE-2026-12650 deserialization RCE. Fingerprints Login.aspx / AutomationService.svc surfaces and flags releases before 2026.2 when version metadat...

Veeam Login Panel - Detect

Veeam login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Veeam login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Veeam Login Panel - Detect', 'description': 'Veeam login...

Directum Login Panel - Detect

Directum login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Directum login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Directum Login Panel - Detect', 'description':...

EMS Login Panel - Detect

EMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EMS Login Panel - Detect', 'description': 'EMS login panel was...

Sitecore Admin Login Panel - Detect

Sitecore admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sitecore Admin Login Panel - Detect',...

SolarWinds Orion Login Panel - Detect

SolarWinds Orion login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds Orion login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SolarWinds Orion Login Panel - Detect...

EUVD-2023-54557

Malicious code in bioql PyPI...

CVE-2025-57104: Improper Neutralization of Special Elements used in an SQL Command

Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx...

Teampel security vulnerabilities

Teampel is a private cloud office platform from Teampel Inc. A security vulnerability exists in Teampel version 5.1.6, which originates from the file /Common/login.aspx being susceptible to SQL injection attacks...

CVE-2009-2612

SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PT-2024-31828

Name of the Vulnerable Software and Affected Versions baltic-it TOPqw Webportal versions 1.35.283.2 through 1.35.283.3 Description The login form of the baltic-it TOPqw Webportal at "/Apps/TOPqw/Login.aspx" is vulnerable to SQL injection. The vulnerability exists in the txtUsername parameter, whi...

CVE-2024-45876: Improper Neutralization of Special Elements used in an SQL Command

The login form of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.283.4 at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries...

Orion Login Brute Force

The vulnerability of the Orion Login.aspx page of the SolarWinds IT infrastructure monitoring and management software is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...

PT-2024-4607

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to a race condition vulnerability affecting the web console of the SolarWinds Platform. It involves synchronization errors when using a shared resource. The...