CVE-2026-79798 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

CVE-2026-79798

The ClearPass Policy Manager web-based management interface contains SQL injection vulnerabilities that can be exploited by a low-privileged authenticated remote attacker. Successful exploitation allows the attacker to execute arbitrary database commands against the ClearPass Policy Manager insta...

CVE-2026-79794

The ClearPass Policy Manager web-based management interface contains a SQL injection vulnerability . This flaw allows an authenticated remote attacker to perform SQL injection attacks against the ClearPass Policy Manager instance. If successfully exploited, an attacker could execute arbitrary dat...

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

EUVD-2026-93882

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

CVE-2026-76754

An unauthenticated remote attacker can exploit a vulnerability in an affected interface of ClearPass Policy Manager to perform SQL injection attacks. Successful exploitation allows the attacker to execute arbitrary database commands against the instance. No specific affected versions or remediati...

CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

EUVD-2026-93881

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands...

CVE-2026-61797

CVE-2026-61797 — GLPI PDF プラグイン 時間ベースブラインド SQL インジェクション CVE-2026-61797 の概念実証（PoC）。GLPI PDF プラグインに影響を与える時間ベースブラインド SQL インジェクション脆弱性です。 この脆弱性は以下を通じて到達可能です： /marketplace/pdf/front/preference.form.php 脆弱な実装では、item POST 配列からのユーザー制御値が、適切なパラメータ化なしに SQL クエリに挿入されます。 認証済みの低権限 GLPI ユーザーは、この動作を悪用して SQL...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX 認証前SQLiからRCEへ CVE-2025-57819 のオールインワンエクスプロイトです。FreePBXのendpointモジュールにおける認証不要のSQLインジェクションで、 cronジョブインジェクションを介してリモートコード実行につながります。 CVSS : 9.8（Critical） — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : 2025年8月29日追加 影響を受けるバージョン : endpointモジュール │ ▼ SQL Injection into...

CVE-2025-45871

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 検出および対応キット CVE-2026-76461 の検出、ハンティング、および修復リソース。これは Cisco Secure Email Gateway SEG 向け Cisco AsyncOS における重大な SQL インジェクション脆弱性です。 ⚠️ 免責事項 このリポジトリには防御的なコンテンツのみ が含まれています: Sigma ルール、YARA ルール、技術分析、侵害指標 IoC、および修復ガイダンスです。 エクスプロイトコード、PoC、または武器化されたツールは含まれていません。 この脆弱性は CISA の Known Exploited...

CVE-2020-7471

CVE-2020-7471 StringAggデリミタ入力によるSQLインジェクション セットアップ: 初期セットアップには ./setup.sh を実行してください dockerイメージを開いてデータベースを初期化します: docker exec -it containerid /bin/bash そして次のコマンドを実行します: python manage.py makemigrations vulapp python manage.py migrate 次のコマンドでインスタンスを起動します: docker-compose up 次のURLを開いてサンプルデータを読み込みます:...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105856

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2019-9053-exploit

CVE-2019-9053 — CMS Made Simple における認証不要のSQLインジェクション 説明 CVE-2019-9053 は、CMS Made Simple バージョン ≤ 2.2.9 に影響を与える 時間ベースのブラインドSQLインジェクション の脆弱性です。認証は必要ありません。 脆弱なパラメータは、News モジュール moduleinterface.php の m1idlist です。攻撃者はこれを悪用して、管理者のパスワードハッシュ、ユーザー名、メールアドレス、およびハッシュに使用されたソルトを抽出できます。 パスワードの保存方式は MD5salt +...

WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Theme Traveler versions = 3.2.9...

loxs-optimized

loxs-optimized 项目来自 https://github.com/coffinxp/loxs CSP-Bypass-xss.txt 注意：它主要用于绕过 CSP payload 2024-11-06 将 CSP-Bypass-xss.txt 添加到 xss.txt 2024-11-07 移除干扰信息 仅显示存在漏洞的信息 2024-11-11 解决程序运行到 100% 时不会自动退出的问题 2024-12-12 cat livedomainurl.txt | gf sqli | tee -a sqlisqli.txt bash sqlmap-batch-detection.s...