139 matches found
CVE-2026-104389
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
CVE-2026-104389
The Sirv WordPress plugin versions up to and including 8.2.5 are vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation allows an attacker to execute arbitrary SQL commands. No specific exploit...
EUVD-2026-92328
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...
CVE-2026-104389: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...
PT-2026-104790
Name of the Vulnerable Software and Affected Versions Sirv versions prior to 8.2.5 Description An issue exists where the software fails to properly neutralize special elements used in SQL commands, allowing for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the...
CVE-2023-50898
Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2...
EUVD-2016-1941
Malware in sbrugna...
EUVD-2023-55631
Malicious code in bioql PyPI...
EUVD-2024-25124
Malicious code in bioql PyPI...
EUVD-2024-30721
Malicious code in bioql PyPI...
EUVD-2024-47499
Malicious code in bioql PyPI...
EUVD-2024-25123
Malicious code in bioql PyPI...
EUVD-2025-12302
Malicious code in bioql PyPI...
@clidey/dory (0.35.0), @noooooooode/merv (0.1.0) +8 more potentially affected by CVE-2025-58751 via sirv (>=3.0.0, <=3.0.1)
sirv NPM version =3.0.0, =0.1.0, =0.0.1, =9.0.0-next.7, =0.1.0, =0.12.3, =0.1.0, =1.6.0, =1.7.0 Source cves: CVE-2025-58751 Source advisory: SNYK:JS-SIRV-12558119...
Directory Traversal
Overview sirv is a The optimized & lightweight middleware for serving requests to static assets Affected versions of this package are vulnerable to Directory Traversal via the viaLocal function, which uses a dirname prefix. An attacker can access files outside the intended public directory by...