Lucene search
+L

237070 matches found

NVD
NVD
added 4 hours ago4 views

CVE-2026-19196

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and...

7.5CVSS
SaveExploits0References6
NVD
NVD
added 4 hours ago4 views

CVE-2026-15361

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks...

SaveExploits0References1
Cvelist
Cvelist
added 4 hours ago7 views

CVE-2026-15361 Content Views < 4.5 - Subscriber+ SQL Injection via preview_request

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks...

SaveExploits0References1
EUVD
EUVD
added 4 hours ago5 views

EUVD-2026-54383

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks...

5.7AI score
SaveExploits0References1
CVE
CVE
added 5 hours ago10 views

CVE-2026-19196

CVE-2026-19196 affects SourceCodester Photo Share Website 1.0. The vulnerable element is the unknown function in the file /social/ajax.php?action=login , where manipulation of the email parameter leads to a SQL injection . The attack can be launched remotely and the exploit has been publicly disc...

7.5CVSS6.9AI score
SaveExploits0References6
EUVD
EUVD
added 5 hours ago5 views

EUVD-2026-54369

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and...

7.5CVSS6.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 5 hours ago5 views

CVE-2026-19196 SourceCodester Photo Share Website ajax.php login sql injection

A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=login. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and...

7.5CVSS
SaveExploits0References6
EUVD
EUVD
added 10 hours ago6 views

EUVD-2026-54311

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

8.7CVSS5.7AI score
SaveExploits0References2
EUVD
EUVD
added 10 hours ago5 views

EUVD-2026-54308

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the field and order parameters in paginated list endpoints...

6.3AI score
SaveExploits1References3
EUVD
EUVD
added 10 hours ago4 views

EUVD-2026-54275

Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's databasebackup event handler that allows any unauthenticated network peer to wipe or replace the entire SQLite database by sending a single fullresto...

9.1CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 10 hours ago4 views

EUVD-2026-54228

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

6.5CVSS6.5AI score
SaveExploits0References7
NVD
NVD
added 10 hours ago4 views

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

8.7CVSS
SaveExploits0References1
NVD
NVD
added 10 hours ago4 views

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

10CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.7AI score
SaveExploits0References2
CVE
CVE
added yesterday14 views

CVE-2026-56162

CVE-2026-56162 affects Azure SQL Database. The vulnerability stems from improper authentication that enables an unauthenticated, network-based attacker to elevate privileges. The CVSS‑3.1 score is 10.0 (CRITICAL) with vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating network access, low atta...

10CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday5 views

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

8.7CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

8.7CVSS5.7AI score
SaveExploits0References2
CVE
CVE
added yesterday20 views

CVE-2026-62836

CVE-2026-62836 : Affects Azure SQL Managed Instance. The issue is an improper restriction of the communication channel to intended endpoints , allowing an unauthorized attacker to elevate privileges over a network. According to the sources, the exploit path is network-based with no user interacti...

8.7CVSS5.7AI score
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-19069

CVE-2026-19069 affects the itsourcecode Hospital Management System 1.0, specifically the /treatmentrecord.php endpoint. The vulnerability arises from manipulating the editid parameter, enabling SQL injection. Exploitation is remote, and public disclosures exist. Connected sources document this is...

6.5CVSS6.5AI score
SaveExploits0References6
CVE
CVE
added yesterday7 views

CVE-2026-19062

Summary: CVE-2026-19062 affects the chiuwingyan house application, specifically the /paid/selectall.action endpoint. The vulnerability arises from manipulation of the zuname parameter, enabling a remote SQL injection. Public disclosure exists; no product version details are provided, and there is...

7.5CVSS6.9AI score
SaveExploits0References5
Rows per page
Query Builder