Lucene search
+L

35939 matches found

CNNVD
CNNVD
•added 2026/05/23 12:00 a.m.•50 views

New API SQL注入漏洞

The New API is an interface software developed by QuantumNous. Versions of the New API prior to 0.12.1 have a SQL injection vulnerability. This vulnerability originates from the SearchUserTopUps/SearchAllTopUps function in the model/topup.go file of the self Endpoint component, which may lead to...

6.5CVSS6.7AI score0.00316EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2026/05/23 12:00 a.m.•88 views

Reasoning As an Attack Surface: Adaptive Evolutionary CoT Jailbreaks for LLMs

Large Reasoning Models LRMs have demonstrated remarkable capabilities in reasoning and generation tasks and are increasingly deployed in real-world applications. However, their explicit chain-of-thought CoT mechanism introduces new security risks, making them particularly vulnerable to jailbreak...

5.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/05/22 9:17 p.m.•40 views

CVE-2026-41075 RT: SQL injection via entry_aggregator parameter in JSON search

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing th...

8.8CVSS0.00483EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/22 9:17 p.m.•14 views

CVE-2026-41075 RT: SQL injection via entry_aggregator parameter in JSON search

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing th...

8.8CVSS5.8AI score0.00483EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/22 9:17 p.m.•84 views

CVE-2026-41075

RT (Request Tracker) is affected by an SQL injection in the JSON search path via the entry_aggregator parameter. Affected versions: 5.0.0–5.0.9 and 6.0.0–6.0.2. Root cause: input incorporated into queries without proper validation, enabling authenticated users to read or modify RT database data. ...

8.8CVSS5.8AI score0.00483EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/22 9:17 p.m.•12 views

CVE-2026-41075 RT: SQL injection via entry_aggregator parameter in JSON search

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing th...

8.8CVSS5.9AI score
SaveExploits0References5
NVD
NVD
•added 2026/05/22 10:16 a.m.•24 views

CVE-2026-25606

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS0.00358EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/22 9:14 a.m.•56 views

CVE-2026-25606

CVE-2026-25606 concerns STER. The vulnerability is a SQL injection affecting multiple Search Filters where improper input neutralization allows an authenticated attacker to view data belonging to other users or any data the application can access. Affected component appears to be the STER web/app...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/22 9:14 a.m.•48 views

CVE-2026-25606 SQL Injection in STER

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS0.00358EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/22 9:14 a.m.•24 views

EUVD-2026-31422

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/22 9:14 a.m.•15 views

CVE-2026-25606

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/22 9:14 a.m.•12 views

CVE-2026-25606 SQL Injection in STER

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/22 2:28 a.m.•9 views

CVE-2026-4834

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/22 2:28 a.m.•58 views

CVE-2026-4834 WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS0.00463EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/22 2:28 a.m.•12 views

CVE-2026-4834 WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/22 2:28 a.m.•55 views

CVE-2026-4834

The CVE-2026-4834 entry concerns the WP ERP Pro plugin for WordPress, affected up to version 1.5.1. The vulnerability is a SQL Injection via the 'search_key' parameter due to insufficient escaping and lack of proper query preparation. This allows unauthenticated attackers to append additional SQL...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/22 2:28 a.m.•26 views

EUVD-2026-31391

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•16 views

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. This allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

7.8CVSS6.1AI score0.00185EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•21 views

PT-2026-42742

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•20 views

WordPress plugin WP ERP Pro SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
Rows per page
Query Builder