5847 matches found
EUVD-2026-101158
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89076 MOVEit Transfer SQL injection in custom reporting
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-89076
Progress MOVEit Transfer is impacted by an SQL injection vulnerability (CWE-89) within the Custom Reports module . The flaw stems from the improper neutralization of special elements used in SQL commands. This issue affects versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The...
honeypot-stuff
honeypot-stuff I am a honeypot operator. This is where I will host my malware analysis reports and other things related to my honeypot...
CVE-2026-105107
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
EUVD-2026-100898
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
CVE-2026-105107
The Koha library system is vulnerable to SQL injection within the reports/cat_issues_top.pl script (specifically the sub calculate function). The root cause is the direct concatenation of user-controlled Criteria , Filter , and Limit request parameters into dynamic SQL queries without adequate va...
CVE-2026-105107 Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
CVE-2026-105107 Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
CVE-2026-90989
The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff...
CVE-2026-90989
The Tainacan WordPress plugin before version 1.4.0 contains a vulnerability where its reports REST endpoints lack proper access controls. Specifically, the plugin fails to restrict these endpoints to users with management capabilities, which allows any authenticated subscriber to disclose the ema...
EUVD-2026-100861
The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff...
PT-2026-113714
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat issues top.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
PT-2026-113690
The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff...
PT-2026-114328
šØ CVE-2026-89076 Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4. š@cveNotify...
Linux Distros Unpatched Vulnerability : CVE-2026-110772
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypas...
halogen
Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...
CVE-2026-109768
Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
CVE-2026-109768
A Denial-of-service vulnerability exists in the Site Reports component. The underlying cause is identified as Uncontrolled Resource Consumption (CWE-400 ). This issue affects Firefox and Thunderbird , with a fix available in version 158 for both products. Exploitation details are not provided in ...
