CVE-2026-105845

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2020-7471

CVE-2020-7471 This repository provides the environment and POC for CVE-2020-7471 Potential SQL injection via StringAggdelimiter vulnerability. Affected Django versions 1.11 to 1.11.28 exclusive 2.2 to 2.2.10 exclusive 3.0 to 3.0.3 exclusive Before downloading and using, the following operations a...

Netgear-ssl-vpn-20211222-CVE-2022-29383

Netgear-ssl-vpn-20211222 CVE-2022-29383 NETGEAR ProSafe SSL VPN vulnerabilidad de inyección SQL en scgi-bin/platform.cgi Versión de firmware： FVS336Gv2 - FVS336Gv3 comando sqlmap Vulnerabilidad de inyección SQL: USERDBDomains.Domainname...

CVE-2025-25257

CVE-2025-25257 CVE‑2025‑25257 es una vulnerabilidad crítica de inyección SQL sin autenticación que afecta al componente Fabric Connector de Fortinet FortiWeb. Afecta a las versiones de FortiWeb: 7.6.0–7.6.3 7.4.0–7.4.7 7.2.0–7.2.10 ≤ 7.0.10 Detalles Técnicos El problema reside en la función...

cs4239-cve-2020-15873

CVE-2020-15873 Prueba de concepto de CVE-2020-15873 - Inyección SQL ciega en Librenms librenms librenms Desarrollo Depuración de la instancia Docker de LibreNMS 1. Obtén un shell en el contenedor: $ sudo docker exec -it librenmsvuln /bin/bash 2. Para leer los registros generados por LibreNMS: $...

Payload: SQL Injection in SQLite and Postgres

Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...

NPM: Payload: SQL Injection in SQLite and Postgres

NPM: Payload: SQL Injection in SQLite and Postgres vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.88.0...

CVE-2024-29824

CVE-2024-29824: Vulnerabilidad de Inyección SQL y Ejecución Remota de Código en Ivanti EPM Exploit de prueba de concepto para ejecutar comandos a ciegas en appliances Ivanti EPM vulnerables. Publicación del Blog Análisis profundo e indicadores de compromiso aquí:...

CVE-2026-105957

A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...

EUVD-2026-93487

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

EUVD-2026-93471

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845

The Payload headless content management system is vulnerable to SQL injection in its SQLite and Postgres adapters. This vulnerability affects versions 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27 . An untrusted user capable of querying readable collections via dynamic filters or...

CVE-2024-39250

Plantilla de nuclei para PoC CVE-2024-39250 Efrotech http://www.efrotech.com/ desarrolla TimeTrax https://etimetrax.com/, un programa de seguimiento de asistencia de recursos humanos, y encontré una vulnerabilidad de inyección SQL no autenticada. Es fácil ejecutar el vector de ataque, así que cre...

Collabfiltrator

Collabfiltrator Exfiltrate Blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator. Version: 4.0.1 Authors: Adam Logue Jared McLaren Frank Scarpella Ryan Griffin AI Authors: Claude 3.5 Sonnet ChatGPT 4o Requirements: Burp Suite Professional 2024.12.1 or Later Support:...

CVE-2022-31296

CVE-2022-31296 Online Discussion Forum Site 1.0 - Blind SQL Injection Exploit Title: Online Discussion Forum Site 1.0 - Blind SQL Injection Date: 2022-06-13 CVE: CVE-2022-31296 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2024-35584

CVE-2024-35584 Inyección SQL autenticada en OpenSIS Descripción Existe una vulnerabilidad de inyección SQL en Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php. Esta falla afecta a OpenSis Community Edition 9.1 a 8.0 y posiblemente a versiones anteriores. Prueba de...

cve-2026-9082

CVE-2026-9082 Type : SQL Injection CWE-89 Affected Product : Drupal Core Database Abstraction API Drupal Advisory : SA-CORE-2026-004 Published : May 20, 2026 Severity : Highly Critical Drupal 20/25 | NVD CVSS 6.5 What Is It? CVE-2026-9082 is a SQL Injection vulnerability in Drupal's core database...

CVE-2026-23921

CVE-2026-23921 — Zabbix Time-Based Blind SQL Injection Affected versions: Zabbix 50 THEN pgsleep3 ELSE pgsleep0 END-- Usage PostgreSQL backend d...

CVE-2024-36837

CVE-2024-36837 / \tCNVD-2024-30128 POC escribe la URL en url.txt y ejecuta CVE-2024-36837.py CVE-2024-36837 En mi primer año de universidad, descubrí que una institución educativa usaba CRMEB Mall como tienda en línea en una acción de protección de Internet. Después de las pruebas, se encontró un...