260336 matches found
PrestaShop Responsive Mega Menu Module - Remote Code Execution
The 'Responsive Mega Menu' module for PrestaShop is prone to a remote code execution and SQL injection vulnerability. modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop allows remote attackers to execute an SQL injection or...
CVE-2026-56292-AcyMailing-SQLi
CVE-2026-56292 — Inyección SQL no autenticada en AcyMailing para Joomla Autor: nullwhisper Solo para investigación de seguridad autorizada / validación de vulnerabilidades. AcyMailing para Joomla expone la tarea pública de front-end frontentityselect::loadEntityFront. En versiones antiguas, el...
CLEANSTART-2026-DW89349 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE
Security vulnerability affects the apache-hive package. pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE...
CVE-2025-9776
CVE-2025-9776：CatFolders WordPress 插件中的认证 SQL 注入漏洞 关键词： CVE-2025-9776, CatFolders WordPress 漏洞, SQL 注入 WordPress, 认证 SQL 注入, WordPress 安全, CSV 导入漏洞, WordPress 插件利用, CWE-89, WordPress 数据库攻击, 媒体库漏洞, WordPress CVE 2025 目录 概述 漏洞详情 技术分析 利用证明 修复指南 CVSS 指标 参考 安全联系方式 概述 在 CatFolders WordPress 插件中发现了一个经过认...
PT-2026-108147
Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions 3.2.0 through 3.2.4 MariaDB Connector/Node.js versions 3.3.x prior to 3.3.4 MariaDB Connector/Node.js versions 3.4.x prior to 3.4.7 MariaDB Connector/Node.js versions 3.5.x prior to 3.5.4 Description When the...
Apache OzHera 2.2.6 Authenticated SQL Injection
Summary Apache OzHeraIncubating is an Application Performance Monitoring APM platform designed for the cloud-native era. It revolves around applications and integrates capabilities such as metric monitoring, distributed tracing, logging, and alerting. The platform's mission is to enhance the onli...
PT-2026-107825
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...
CVE-2026-67401
CVE-2026-67401 — Inyección SQL en EmailTrack de cPanel/WHM → RCE como root Prueba de concepto para CVE-2026-67401 , una vulnerabilidad crítica de inyección SQL en la funcionalidad EmailTrack de cPanel & WHM que permite a un usuario autenticado con privilegios relacionados con correo escribir...
CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection
CVE-2025-67644 PoC – LangGraph SQLite 检查点 SQL 注入 CVE-2025-67644 是 langgraph-checkpoint-sqlite 包（属于 LangGraph / LangChain 生态）中的一个 SQL 注入 漏洞（CWE-89）。 攻击者可通过传递给 SqliteSaver 的 list / alist 方法的未经净化的元数据过滤键 注入任意 SQL。 影响 ：可完全绕过过滤器、泄漏所有检查点记录（包括可能敏感的对话状态、线程 ID、元数据），在某些部署场景下还可实现更广泛的数据库访问。 受影响版本 ：|"Sends...
CVE-2026-76270
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...
CVE-2025-65354
CVE-2025-65354 — Vulnerabilidad de inyección SQL Resumen Existe una vulnerabilidad de inyección SQL en la aplicación event-management de PuneethReddyHC versión 1.0 debido a un manejo inadecuado de las entradas. Tipo de vulnerabilidad Inyección SQL Componente afectado Endpoint:...
CVE-2026-76270 Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...
EUVD-2026-94622
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the listspl2modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer REST API, including private SPL2 module definitions...
CVE-2026-76270
Splunk Enterprise and Splunk Cloud Platform versions below 10.4.3 (excluding 10.2.x, 10.0.x, and 9.4.x) are vulnerable to an SQL Injection in the SPL2 module filtering functionality. A user with the list_spl2_modules capability can exploit the lack of parameterized user-supplied values in databas...
Payload: SQL injection in SQLite/Postgres
Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...
EUVD-2026-93500
Payload: SQL injection in SQLite/Postgres...
GHSA-PJ7X-6WPF-PGVP Payload: SQL injection in SQLite/Postgres
Impact An attacker who has read plus create or update access to a collection can submit a request that includes a SQL injection targeting a specific field path shape and operators in Payload's SQLite and Postgres. You are affected if: - You use @payloadcms/db-sqlite or @payloadcms/db-d1-sqlite. -...
Exploit for CVE-2026-102782
CVE-2026-102782 — OrdaSoft Simple Membership unauth SQLi Pyth...
CVE-2025-50565
CVE-2025-50565 描述 Doubo ERP 1.0 存在一个SQL注入漏洞，由于对用户输入缺乏过滤，攻击者可远程利用。 漏洞类型 SQL注入 攻击类型 远程 影响信息泄露 true 厂商确认 true 发现者 https://www.jump.net.cn 参考 https://www.jump.net.cn https://v12.icu 受影响产品代码库 Doubo ERP 1.0...
CMS-Made-Simple-2.2.9-CVE-2019-9053
免责声明 本仓库提供了一个针对 CMS Made Simple 2.2.9 及更早版本中未经验证的 SQL 注入漏洞的 Python 3 兼容利用程序。该漏洞追踪编号为 CVE-2019-9053，允许攻击者提取敏感的管理员数据，包括用户名、哈希密码、电子邮件和盐值。 原始利用程序由 Daniele Scanu 编写。 原始利用程序：https://www.exploit-db.com/exploits/46635 使用此脚本即表示您同意： 仅将其用于您拥有的系统或已获得明确测试许可的系统。不要求作者或贡献者对其使用导致的任何直接、间接或附带损害承担责任。 此脚本有两种工作模式 模式...