EUVD-2026-86012

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end databa...

CVE-2026-77874 IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end databa...

CVE-2026-77874 IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end databa...

CVE-2026-77874

IBM Enterprise Build of Quarkus (versions 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1) is vulnerable to SQL injection within the Hibernate component. A remote unauthenticated attacker can send specially crafted SQL statements, potentially allowing them to view, add, modify, or delete...

CVE-2026-61819

A flaw was found in pgpartman. A database user with partmanuser privileges can exploit a SQL injection vulnerability by crafting a malicious parent-table name. When the extension is configured to use pgjobmon, this crafted input is improperly processed during an exception, allowing the injection...

CVE-2026-61818

A flaw was found in pgpartman. The undopartition function improperly handles input from partconfig.timeencoder, allowing it to be interpreted as executable SQL code. A user with partmanuser access can inject malicious SQL, which then executes with the privileges of the user invoking undopartition...

web-attack-log-analyzer

Web Server Log Analyzer — Web Attack Detection A Python tool...

CVE-2026-78309

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78311

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78311 SQL Injection in DIAEnergie

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78311

A SQL Injection vulnerability exists in DIAEnergie software, specifically affecting versions before 1.11.00.022 . The vulnerability allows for potential unauthorized access or manipulation of the underlying database. While the documents confirm the existence of the flaw and its impact on confiden...

EUVD-2026-85820

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78311 SQL Injection in DIAEnergie

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78309

A SQL Injection vulnerability exists in DIAEnergie versions before 1.11.00.022 . This vulnerability allows for unauthorized database interaction, potentially leading to high impacts on confidentiality , integrity , and availability . No specific root cause details or remediation steps are provide...

CVE-2026-78309 SQL Injection in DIAEnergie

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

EUVD-2026-85819

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78309 SQL Injection in DIAEnergie

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

Vulnerabilities in Adobe Campaign Classic

Adobe has identified 18 critical vulnerabilities in Adobe Campaign Classic. These vulnerabilities involve code and OS command injection, SQL injection, insufficient authorization, inadequate input validation, and Server-Side Request Forgery SSRF. All 18 vulnerabilities are classified as critical,...

CVE-2026-80513

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...

EUVD-2026-85796

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...