Lucene search
+L

1407 matches found

EUVD
EUVD
added 2026/09/14 12:31 p.m.3 views

EUVD-2026-77378

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apach...

SaveExploits0References2
CVE
CVE
added 2026/09/14 10:45 a.m.5 views

CVE-2026-82232

Apache Syncope is vulnerable to SQL injection through unsanitized sort clauses in the Task search feature. An administrator with adequate entitlements can execute arbitrary SQL via stacked queries , leading to full database compromise. The vulnerability affects versions 3.0.0-M0 through 3.0.16 , ...

SaveExploits0References1
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.155 views

Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

6.3CVSS5.7AI score0.0117EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 3:38 a.m.127 views

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 3:14 a.m.120 views

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...

5.4AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 2:50 p.m.6 views

CVE-2022-23614

CVE-2022-23614 PoC for CVE-2022-23614, GHSA-5mv2-rx3q-4w2v Twig sort filter code execution/sandbox bypass As seen in this commit - https://github.com/twigphp/Twig/commit/.., twig was passing user supplied function name as a callback parameter to uasort here, thus leading to arbitrary code executi...

9.8CVSS8.3AI score0.08209EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/09/13 1:46 p.m.7 views

CVE-2021-43609-POC

Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites root@kitploit: apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle...

9.9CVSS7.8AI score0.02023EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 11:30 a.m.4 views

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

Exploit CVE-2021-36396 Descripción Este repositorio contiene un exploit basado en Python dirigido a CVE-2021-36393, una vulnerabilidad grave encontrada en la función de cursos recientes de Moodle. El fallo reside en el parámetro 'sort', permitiendo ataques de inyección SQL que pueden conducir a u...

9.8CVSS7.2AI score0.52299EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 11:02 a.m.6 views

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter CVE-2019-2196 Security Advisory Android AOSP Download Provider SQL Injection in Query Sort Parameter CVE-2019-2196 Demo...

5.5CVSS6AI score0.00403EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:47 p.m.7 views

CVE-2022-23614

CVE-2022-23614 Proof of concept PoC for CVE-2022-23614 referenced in the DSA-5107-1. CVSS-2.0 : 7.5 CVSS-3.X : 9.8 Explanation Twig is a flexible, fast, and secure template engine for PHP. Notably, it is possible to use filters in a template before rendering it. The sort filter can be used to sor...

9.8CVSS8.2AI score0.08209EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-89695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and...

7.5CVSS0.00488EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 8:19 p.m.7 views

DEBIAN-CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

7.5CVSS0.00488EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.9 views

CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

7.5CVSS0.00488EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 8:02 p.m.7 views

CVE-2008-4687-exploit

CVE-2008-4687-exploit Exploit rápido y sucio en Python para CVE-2008-4687. Descripción por NIST: manageprojpage.php en Mantis anterior a 1.1.4 permite a usuarios autenticados remotos ejecutar código arbitrario a través de un parámetro sort que contiene secuencias PHP, las cuales son procesadas po...

9CVSS5.9AI score0.67453EPSS
SaveExploits5
CVE
CVE
added 2026/09/11 7:46 p.m.13 views

CVE-2026-89695

A Denial of Service vulnerability in the Linux kernel's NFSD (Network File System Daemon) component. The nfsd4_decode_posixacl() function reads a client-supplied u32 entry count without capping it, passing it directly to an O(n²) bubble sort (sort_pacl_range()). A remote attacker can send a craft...

7.5CVSS0.00488EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 7:46 p.m.7 views

EUVD-2026-76607

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

0.00488EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/11 7:46 p.m.8 views

CVE-2026-89695

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

7.5CVSS0.00488EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:46 p.m.8 views

CVE-2026-89695 nfsd: cap decoded POSIX ACL count to bound sort cost

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

7.5CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/11 7:46 p.m.27 views

CVE-2026-89695 nfsd: cap decoded POSIX ACL count to bound sort cost

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

7.5CVSS0.00488EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90411

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4 decode posixacl reads a u32 entry count off the wire and passes it straight to posix acl alloc and sort pacl range. The latter is an On^2 bubble sort, so a client-chosen...

0.00488EPSS
SaveExploits0References3
Rows per page
Query Builder