EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — EverShop 2차 SQL 인젝션 랩 사전 요구 사항 Docker Engine 24+ 및 Docker Compose v2+ 2 GB 여유 RAM 배포 cd EverShop-Lab/ docker compose up 첫 빌드에는 약 2분이 소요됩니다 EverShop v2.1.0 클론, 컴파일, 마이그레이션 실행, 데이터 시드. 앱은 http://localhost:3000에서 사용할 수 있습니다. 자격 증명 필드| 값 ---|--- 관리자 이메일| [email protected] 관리자...

cve-2025-1323

cve-2025-1323 WP-Recall 플러그인 SQL 인젝션 ⚠️ 법적 고지 이 도구는 승인된 보안 테스트 및 교육 목적으로만 사용해야 합니다. 명시적 허가 없이 시스템에 사용하지 마십시오. 오용 시 불법 행위가 될 수 있습니다. ✅ 요구 사항 Python 3.x requests 모듈 종속성 설치: pip install requests python CVE-2025-1323.py Enter target URL e.g. https://target.com/wp-admin/admin-ajax.php:...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2026-105856

The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2026-105845

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

cs4239-cve-2020-15873

CVE-2020-15873 CVE-2020-15873의 개념 증명PoC - LibreNMS librenms librenms 개발 LibreNMS Docker 인스턴스 디버깅 1. 컨테이너에 셸을 획득합니다: $ sudo docker exec -it librenmsvuln /bin/bash 2. LibreNMS에서 생성된 로그를 읽으려면: $ tail -f /opt/librenms/logs/librenms.log MariaDB Docker 인스턴스 디버깅 1. 컨테이너에 셸을 획득합니다: $ sudo docker exec -it...

GHSA-V49J-62M6-PGRR Payload: SQL Injection in SQLite and Postgres

Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...

Payload: SQL Injection in SQLite and Postgres

Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...

NPM: Payload: SQL Injection in SQLite and Postgres

NPM: Payload: SQL Injection in SQLite and Postgres vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.88.0...

CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

EUVD-2026-93487

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105957

A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...

CVE-2026-105845

The Payload headless content management system is vulnerable to SQL injection in its SQLite and Postgres adapters. This vulnerability affects versions 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27 . An untrusted user capable of querying readable collections via dynamic filters or...

EUVD-2026-93471

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...

cve-2026-9082

CVE-2026-9082 유형 : SQL 인젝션 CWE-89 영향받는 제품 : Drupal Core Database Abstraction API Drupal 권고 : SA-CORE-2026-004 게시일 : 2026년 5월 20일 심각도 : 매우 치명적 Drupal 20/25 | NVD CVSS 6.5 무엇인가요? CVE-2026-9082는 Drupal 코어 데이터베이스 추상화 API의 SQL 인젝션 취약점입니다. Drupal의 DB 계층은 PDO를 래핑하고 모든 쿼리가 데이터베이스에 도달하기 전에 정화합니다. 이 취약점은...

CVE-2026-23921

CVE-2026-23921 — Zabbix 時間ベースのブラインド SQL インジェクション 影響を受けるバージョン: Zabbix 50 THEN pgsleep3 ELSE pgsleep0 END-- 使用方法 PostgreSQL バックエンド（デフォルト） python exploitCVE-2026-23921.py \ --url http://TARGET/apijsonrpc.php \ --user Admin --password zabbix --db pgsql MySQL バックエンド python exploitCVE-2026-23921.py ...