CVE-2026-79794

The ClearPass Policy Manager web-based management interface contains a SQL injection vulnerability . This flaw allows an authenticated remote attacker to perform SQL injection attacks against the ClearPass Policy Manager instance. If successfully exploited, an attacker could execute arbitrary dat...

EUVD-2026-93882

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-76754

An unauthenticated remote attacker can exploit a vulnerability in an affected interface of ClearPass Policy Manager to perform SQL injection attacks. Successful exploitation allows the attacker to execute arbitrary database commands against the instance. No specific affected versions or remediati...

EUVD-2026-93881

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-61797

CVE-2026-61797 — GLPI PDF Plugin Time-Based Blind SQL Injection Proof of Concept for CVE-2026-61797 , a time-based blind SQL Injection vulnerability affecting the GLPI PDF plugin. The vulnerability can be reached through: /marketplace/pdf/front/preference.form.php In the vulnerable implementation...

CVE-2025-57819-exploit

CVE-2025-57819 — SQLi de pre-autenticación a RCE en FreePBX Un exploit todo-en-uno para CVE-2025-57819 , una inyección SQL no autenticada en el módulo endpoint de FreePBX que conduce a la ejecución remota de código mediante la inyección de trabajos cron. CVSS : 9.8 Crítico —...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — Detection & Response Kit Detection, hunting, and remediation resources for CVE-2026-76461 , a critical SQL injection vulnerability in Cisco AsyncOS for Cisco Secure Email Gateway SEG. ⚠️ Disclaimer This repository contains defensive content only : Sigma rules, YARA rules, technica...

CVE-2020-7471

CVE-2020-7471 Inyección SQL a través de la entrada del delimitador StringAgg Configuración: Ejecuta ./setup.sh para la configuración inicial Abre la imagen de Docker para iniciar la base de datos: docker exec -it containerid /bin/bash Y ejecuta los siguientes comandos: python manage.py...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105856

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthenticated SQL Injection in CMS Made Simple Descripción CVE-2019-9053 es una vulnerabilidad de inyección SQL time-based blind que afecta a CMS Made Simple en versiones ≤ 2.2.9. No requiere autenticación. El parámetro vulnerable es m1idlist en el módulo News moduleinterface.ph...

WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Theme Traveler versions = 3.2.9...

loxs-optimized

loxs-optimized Project from https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Note: It mainly bypasses the CSP payload 2024-11-06 Add CSP-Bypass-xss.txt to xss.txt 2024-11-07 Removing interfering information Only the vulnerable information is displayed 2024-11-11 Solves the problem that the...

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — Laboratorio de inyección SQL de segundo orden de EverShop Requisitos previos Docker Engine 24+ con Docker Compose v2+ 2 GB de RAM libre Despliegue cd EverShop-Lab/ docker compose up Espera 2 minutos para la primera compilación clona EverShop v2.1.0, compila, ejecuta las migracion...

cve-2025-1323

cve-2025-1323 Inyección SQL en el plugin WP-Recall ⚠️ Aviso legal Esta herramienta está destinada exclusivamente a pruebas de seguridad autorizadas y fines educativos. No la utilices contra sistemas sin permiso explícito. El uso indebido puede ser ilegal. ✅ Requisitos Python 3.x Módulo requests...

CVE-2026-105856

The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...