Lucene search
+L

250089 matches found

Patchstack
Patchstack
•added 2026/09/30 11:01 a.m.•4 views

WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Intrudify in WordPress Plugin Media LIbrary Assistant versions = 3.41...

5.8AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/09/30 10:48 a.m.•4 views

WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Intrudify in WordPress Plugin Event Tickets versions = 5.29.5...

5.8AI score
SaveExploits0Affected Software1
CVE
CVE
•added 2026/09/30 10:30 a.m.•5 views

CVE-2026-103113

The OS4ED openSIS-Classic software (up to version 9.3 ) is vulnerable to SQL injection in the General Information Tab component. The flaw exists within the save action function of the modules/students/Student.php file. An attacker can exploit this by manipulating the students argument, which may ...

5.8CVSS5.3AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 10:30 a.m.•5 views

EUVD-2026-89762

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

5.8CVSS5.3AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 9:56 a.m.•10 views

NginxHunter

NginxHunter Description NginxHunter is a comprehensive tool designed to analyze Nginx access logs for security vulnerabilities and suspicious activities. It detects SQL injection attempts, scanner tools, sensitive path accesses, exploitation attempts, webshells, and more. Ideal for system...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 9:26 a.m.•20 views

google-dorks-bug-bounty

Google Dorks for Bug Bounty A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting Live Tool Broad domain search w/ negative search site:example.com -www -shop -share -ir -mfa PHP extension w/ parameters site:example.com ext:php inurl:? API Endpoints site:example.com...

6.2AI score
SaveExploits0References3
NVD
NVD
•added 2026/09/30 9:17 a.m.•8 views

CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

5.5CVSS0.00247EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/30 9:17 a.m.•7 views

CVE-2026-102456

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

7.1CVSS0.00272EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/30 8:56 a.m.•19 views

Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

9.8CVSS7.2AI score0.9835EPSS
SaveExploits31
Kitploit
Kitploit
•added 2026/09/30 8:45 a.m.•17 views

sqlifinder

SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...

6.3AI score
SaveExploits0
CVE
CVE
•added 2026/09/30 8:36 a.m.•8 views

CVE-2026-102578

A SQL injection vulnerability exists in Moodle within the question bank web service . An authenticated attacker can submit unsanitized input directly into database queries, potentially allowing them to view, alter, or delete sensitive data stored in the underlying database. Specific details regar...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/30 8:36 a.m.•5 views

EUVD-2026-89717

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/30 8:30 a.m.•6 views

EUVD-2026-89712

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

7.1CVSS5.9AI score0.00272EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 8:30 a.m.•8 views

CVE-2026-102456 DigiWin|EasyFlow .NET - SQL Injection

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

7.1CVSS0.00272EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 8:30 a.m.•9 views

CVE-2026-102456

The EasyFlow .NET application, developed by Digiwin , contains an SQL Injection vulnerability. This flaw allows authenticated remote attackers to inject arbitrary SQL commands, which can be used to read database contents . No specific remediation or exploit details are provided in the documents.

7.1CVSS5.9AI score0.00272EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/30 8:26 a.m.•11 views

CVE-2024-8465-PoC

CVE-2024-8465 – SQL Injection Proof of Concept Team Information Team Name: The Misfits Team Members: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Overview This repository contains a vulnerable web application created as a Proof of Concept PoC to demonstrate an SQL...

9.8CVSS6AI score0.00464EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/30 8:25 a.m.•21 views

CVE-2025-25257

Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...

9.8CVSS8.6AI score0.99775EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/09/30 8:23 a.m.•20 views

nex-forms_SQL-Injection-CVE-2023-2114

nex-formsSQL-Injection CVE-2023-2114 https://vulners.com/cve/CVE-2023-2114 https://wpscan.com/vulnerability/3d8ab3a5-1bf8-4216-91fa-e89541e5c43d Quick Review about the SQL-Injection in the NEX-Forms Plugin for WordPress Uploaded exploit Note that this uploaded exploit code isnt for this particula...

7.2CVSS7.7AI score0.44629EPSS
SaveExploits3
NVD
NVD
•added 2026/09/30 8:16 a.m.•4 views

CVE-2026-6806

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS0.00273EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/30 8:16 a.m.•6 views

CVE-2026-16596

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'datafieldslist' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

6.5CVSS0.00224EPSS
SaveExploits0References2
Rows per page
Query Builder