260348 matches found
CVE-2026-107103
A SQL Injection vulnerability exists in the Manacle Technologies ERP System due to insufficient validation and parameterization of user-supplied input in an API endpoint . An unauthenticated remote attacker can exploit this by providing specially crafted input to the vulnerable endpoint. Successf...
CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
security-log-analyzer
🛡️ Security Log Analyzer A fast, dependency-light Python CL...
EUVD-2026-94216
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2026-102782
The OrdaSoft Simple Membership Joomla extension (versions
CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...
CVE-2025-25257
Fortinet FortiWeb CVE-2025-25257 भेद्यता परीक्षक विवरण यह PowerShell स्क्रिप्ट केवल अधिकृत पैठ परीक्षण उद्देश्यों के लिए डिज़ाइन की गई है। यह Fortinet FortiWeb उपकरणों पर /api/fabric/device/status एंडपॉइंट में CVE-2025-25257, एक अप्रमाणित SQL इंजेक्शन भेद्यता का परीक्षण करती है। स्क्रिप्ट: परीक्ष...
CVE-2026-104667
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
CVE-2026-104953
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
gogs
gogs यहां हम अपने SEED Ubuntu 16.04 VM में अपनी प्रयोगशाला स्थापित करेंगे और SQL इंजेक्शन भेद्यता का शोषण करने से पहले हमें अपने VM पर Go Git Service GOGS स्थापित करनी होगी। VM सेटअप करने के लिए, ये चरण हैं: चरण 1: डेटाबेस स्थापित करें सिस्टम में लॉग इन करने के बाद, हमें यह सुनिश्चित करने के लिए...
CVE-2023-27742
CVE-2023-27742 IDURAR ERP/CRM v1 में /api/login घटक के माध्यम से SQL इंजेक्शन भेद्यता पाई गई। विवरण IDURAR ERP/CRM v1 में /api/login घटक के माध्यम से SQL इंजेक्शन भेद्यता पाई गई। भेद्यता प्रकार SQL इंजेक्शन उत्पाद विक्रेता IDURAR ERP/CRM v1 प्रभावित उत्पाद कोड बेस https://github.com/idurar/erp-cr...
EUVD-2026-94184
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
CVE-2026-104953
The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...
CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
EUVD-2026-94181
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
CVE-2023-40933-PoC
CVE-2023-40933 حمولة sqlmap لاستغلال CVE-2023-40933 الحمولة المعلومات المطلوبة: اسم مستخدم وكلمة مرور صالحان النطاق ومسار المثيل المستضاف sqlmap -D nagiosxi -T xiusers -u "https:///nagiosxi/admin/bannermessage-ajaxhelper.php?action=updatebannermessagesettings&id=3&token=curl -ksX POST...