288250 matches found
CVE-2026-92526
A SQL injection vulnerability exists in itsourcecode Leave Management System 1.0 , affecting the ID argument within /module/leave/index.php. An authenticated remote attacker (low privileges required) can manipulate this parameter to execute arbitrary SQL queries, resulting in low impact on confid...
CVE-2026-92526 itsourcecode Leave Management System index.php sql injection
A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...
EUVD-2026-81092
A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...
CVE-2026-87105
Tanium Threat Response contains a SQL injection vulnerability that has been addressed by the vendor. The flaw is reachable over the network with low privileges and no user interaction , yielding high impact across confidentiality, integrity, and availability (CVSS 3.1 base score 8.8 – HIGH ). The...
CVE-2026-87105 Tanium addressed a SQL injection vulnerability in Threat Response.
Tanium addressed a SQL injection vulnerability in Threat Response...
EUVD-2026-81084
Tanium addressed a SQL injection vulnerability in Threat Response...
CVE-2026-87105 Tanium addressed a SQL injection vulnerability in Threat Response.
Tanium addressed a SQL injection vulnerability in Threat Response...
CVE-2026-87024 Tanium addressed a SQL injection vulnerability in Asset.
Tanium addressed a SQL injection vulnerability in Asset...
CVE-2026-87024 Tanium addressed a SQL injection vulnerability in Asset.
Tanium addressed a SQL injection vulnerability in Asset...
EUVD-2026-81082
Tanium addressed a SQL injection vulnerability in Asset...
CVE-2026-87024
Tanium Asset contains a SQL injection vulnerability that has been addressed by the vendor (advisory TAN-2026-046 ). The CVSS 3.1 score is 7.5 (HIGH) , with network attack vector, high complexity, low privileges required, and high impact on confidentiality, integrity, and availability. No specific...
EUVD-2026-81080
Tanium addressed a SQL injection vulnerability in Asset...
CVE-2026-86865 Tanium addressed a SQL injection vulnerability in Asset.
Tanium addressed a SQL injection vulnerability in Asset...
CVE-2026-86865 Tanium addressed a SQL injection vulnerability in Asset.
Tanium addressed a SQL injection vulnerability in Asset...
CVE-2026-86865
Tanium Asset contains a SQL injection vulnerability that has been addressed by the vendor, as documented in advisory TAN-2026-049 . The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a network vector, low attack complexity, and low privileges required , resulting in high impact to confidentialit...
sqli-cheatsheet
💉 SQLi Cheatsheet — Pentest em Projetos Vibecoded Cheatsheet...
CVE-2026-92406
A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...
postgresql:18 security update
An update is available for module.pgvector, module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, postgis, module.postgis, pgvector, postgres-decoderbufs, postgresql, pgaudit, module.postgresql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base...
CVE-2026-92405
A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2026-84993
MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value before AbstractSqlPlatform.getOrderByExpression concatenate...