WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin affiliate-toolkit versions = 3.9.1...

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.13...

CVE-2024-3495-POC

CVE-2024-3495-POC إضافة ووردبريس Country State City Dropdown CF7 الإصدارات حتى 2.7.2 معرّضة لثغرة حقن SQL عبر المعاملين 'cnt' و'sid'. إن عدم كفاية التهريب ونقص التحضير في استعلام SQL يسمحان لمهاجمين غير مصادَق عليهم بإلحاق استعلامات، مما قد يؤدي إلى استخراج معلومات حساسة من قاعدة البيانات...

CVE-2026-102782

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...

CVE-2026-107103

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

codeql-workshop-cve-2021-21380

जावा के लिए CodeQL कार्यशाला: SQL इंजेक्शन ढूँढना इस कार्यशाला में हम CVE-2021-21380 द्वारा प्रलेखित XWiki प्लेटफ़ॉर्म के रेटिंग घटक में SQL इंजेक्शन खोजने के लिए वाक्यात्मक और अर्थगत तर्क का उपयोग करेंगे। सामग्री जावा के लिए CodeQL कार्यशाला: SQL इंजेक्शन ढूँढना सामग्री पूर्वापेक्षाएँ और सेटअप...

CVE-2024-8465-PoC

CVE-2024-8465 – إثبات مفهوم حقن SQL معلومات الفريق اسم الفريق: The Misfits أعضاء الفريق: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi نظرة عامة يحتوي هذا المستودع على تطبيق ويب ضعيف تم إنشاؤه كإثبات مفهوم PoC لتوضيح ثغرة حقن SQL مستوحاة من CVE-2024-8465. التطبيق غير آم...

CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

EUVD-2026-94218

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

CVE-2026-107103

A SQL Injection vulnerability exists in the Manacle Technologies ERP System due to insufficient validation and parameterization of user-supplied input in an API endpoint . An unauthenticated remote attacker can exploit this by providing specially crafted input to the vulnerable endpoint. Successf...

CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

security-log-analyzer

🛡️ Security Log Analyzer A fast, dependency-light Python CL...

EUVD-2026-94216

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...

CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...

CVE-2026-102782 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic,...

CVE-2026-102782

The OrdaSoft Simple Membership Joomla extension (versions

CVE-2025-25257

Fortinet FortiWeb CVE-2025-25257 भेद्यता परीक्षक विवरण यह PowerShell स्क्रिप्ट केवल अधिकृत पैठ परीक्षण उद्देश्यों के लिए डिज़ाइन की गई है। यह Fortinet FortiWeb उपकरणों पर /api/fabric/device/status एंडपॉइंट में CVE-2025-25257, एक अप्रमाणित SQL इंजेक्शन भेद्यता का परीक्षण करती है। स्क्रिप्ट: परीक्ष...

CVE-2026-104667

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

gogs

gogs यहां हम अपने SEED Ubuntu 16.04 VM में अपनी प्रयोगशाला स्थापित करेंगे और SQL इंजेक्शन भेद्यता का शोषण करने से पहले हमें अपने VM पर Go Git Service GOGS स्थापित करनी होगी। VM सेटअप करने के लिए, ये चरण हैं: चरण 1: डेटाबेस स्थापित करें सिस्टम में लॉग इन करने के बाद, हमें यह सुनिश्चित करने के लिए...