Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

freepbx-rce-detector Triage scanner for CVE-2025-57819, t...

CVE-2026-105076

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1...

CVE-2026-105076 WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1...

CVE-2026-105076 WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1...

CVE-2026-105076

The Appsbd Vitepos vitepos-lite WordPress plugin is vulnerable to Blind SQL Injection in versions up to and including 3.6.1 . The root cause is the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). This flaw allows an attacker to perform unauthorized database queries. N...

EUVD-2026-94942

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1...

WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Vitepos versions = 3.6.1...

SQL-Injection-Cheat-Sheet

SQL-Inje...

Vulnerabilities in Kiteworks

Kiteworks has identified several vulnerabilities in its Kiteworks product line. These vulnerabilities concern various components and functions within the products. - Authorized administrators may exploit insufficient validation in import and export functions, resulting in the writing of files at...

CVE-2026-12260

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

TataShops-cyber-check-attacks

TataShops — Application Security & DAST Laboratory TataShop...

CVE-2026-12260

The NetBoard CRM demo platform is vulnerable to a SQL injection flaw in the ‘user-name’ POST parameter of the ‘/module/auth/recovery.php’ endpoint. The vulnerability allows for blind attacks using Boolean, error, time-based, and UNION techniques. Successful exploitation enables an attacker to ext...

EUVD-2026-94803

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

CVE-2026-12260 SQL injection in the NetBoard CRM demo platform

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

CVE-2026-5048

The HPE B-Series SANnav Management Portal (specifically versions prior to 3.0.0a and 3.0.1 ) is vulnerable to an SQL Injection flaw in various external API inventories. An authenticated attacker can exploit this by injecting malicious data into certain REST API -query parameters . The potential s...

CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

EUVD-2026-94757

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

SQL Injection

Payload CMS is vulnerable to SQL Injection. The vulnerability is due to improper validation of crafted field paths and operators in collections containing JSON fields or blocks with blocksAsJSON enabled, which allows an authenticated attacker with read and create or update permissions to inject...