CVE-2024-43468_mTLS_go

CVE-2024-43468 استغلال حقن SQL في SCCM إصدار شهادات عميل mTLS من سلسلة مفاتيح MacOS تنفيذ بلغة Go لاستغلال CVE-2024-43468 الذي يستخدم سلسلة مفاتيح macOS لمصادقة mTLS بدون الحاجة لتصدير المفاتيح من السلسلة. بالإضافة إلى ذلك: تمت إضافة دعم للوكيل proxy لتجنب استخدام proxychains المزعج. تمت إضافة...

CVE-2025-69458

CVE-2025-69458 – Movie Rating System 1.0 SQLi to RCE Unauthenticated WriteUp CVE-2025-69458 – ExploitDB 50622...

SQL-ThinkPHP-5.0.24-RCE-

SQL-ThinkPHP-5.0.24-RCE- SQL इंजेक्शन भेद्यता पुनरुत्पादन रिपोर्ट — OWASP लक्ष्य मैदान अभ्यास, UNION इंजेक्शन के माध्यम से डेटाबेस से 29 उपयोगकर्ता क्रेडेंशियल निकाले गए ThinkPHP 5.0.24 RCE भेद्यता पुनरुत्पादन रिपोर्ट — CVE-2018-16385, कोड निष्पादन क्षमता का सत्यापन...

TheMisfits-CVE-2024-8465-SQLi

CVE-2024-8465 – SQL Injection Proof of Concept Team Information Team Name: The Misfits Team Members: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Overview This repository contains a vulnerable web application created as a Proof of Concept PoC to demonstrate an SQL...

moveit-transfer-2023-breach

MOVEit Transfer 2023 का बड़ा डेटा उल्लंघन घटना विवरण घटना तिथि: मई–जून 2023 CVE: CVE-2023-34362 हमले का प्रकार: SQL इंजेक्शन खतरा अभिनेता: Cl0p रैनसमवेयर समूह सारांश मई 2023 में, MOVEit Transfer में एक SQL इंजेक्शन कमजोरी का शोषण कर सैकड़ों संगठनों से संवेदनशील डेटा निकाला गया। पाठ्यक्रम...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - حقن SQL في نظام التسوق عبر الإنترنت المتقدم ملخص تم اكتشاف ثغرة أمنية خطيرة من نوع حقن SQL في مشروع Online Shopping System Advanced بواسطة PuneethReddyHC. توجد الثغرة في action.php، الذي يفشل في تنقية إدخال المستخدم من معامل POST keyword بشكل صحيح. يمكن للمهاجم حقن...

Joomla! <3.7.1 - SQL Injection

Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2017-8917 info: name: Joomla! 3.7.1 - SQL Injection...

XWiki Platform - SQL Injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...

XWiki REST API Query - SQL Injection

A SQL injection vulnerability exists in XWiki's REST API query endpoint. An unauthenticated attacker can execute arbitrary SQL queries through the 'q' parameter by manipulating the HQL query, potentially leading to data exfiltration or system compromise. id: CVE-2025-32969 info: name: XWiki REST...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

WordPress Perfect Survey <1.5.2 - SQL Injection

Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection. id: CVE-2021-24762 info: name: WordPress Perfect Survey 1.5.2 - SQL...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

NotificationX <= 2.8.2 - SQL Injection

The NotificationX - Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and la...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

WordPress PayPal Pro <1.1.65 - SQL Injection

WordPress PayPal Pro plugin before 1.1.65 is susceptible to SQL injection via the 'query' parameter which allows for any unauthenticated user to perform SQL queries with the results output to a web page in JSON format. id: CVE-2020-14092 info: name: WordPress PayPal Pro 1.1.65 - SQL Injection...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

CVE-2024-2876

CVE-2024-2876 وصف الثغرة: إن إضافة Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce الخاصة بـ WordPress معرّضة لثغرة SQL Injection عبر دالة 'run' في الصنف 'IGESSubscribersQuery' في جميع الإصدارات حتى الإصدار 5.7.14 ضمناً، وذلك بسبب عدم...

Adobe Campaign Classic < 7.4.3 build 9398 Multiple Vulnerabilities (APSB26-114)

The version of Adobe Campaign Classic installed on the remote host is prior to 7.4.3 build 9398. It is, therefore, affected by multiple vulnerabilities: - An incorrect authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi...

PT-2026-107692

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Description An issue exists where a user with the list spl2 modules capability can perform SQL injection through SPL2 module filtering. This occurs because the software fails to parameterize...