260337 matches found
EverShop-Lab-CVE-2026-25993
CVE-2026-25993 — EverShop 二次SQLインジェクションラボ 前提条件 Docker Engine 24+ と Docker Compose v2+ 空きRAM 2 GB デプロイ cd EverShop-Lab/ docker compose up 初回ビルドには約2分かかります（EverShop v2.1.0 のクローン、コンパイル、マイグレーションの実行、データのシードが行われます）。 アプリは http://localhost:3000 で利用できます。 認証情報 フィールド| 値 ---|--- 管理者メール| [email protected]...
cve-2025-1323
cve-2025-1323 WP-Recall Plugin SQLインジェクション ⚠️ 法的免責事項 本ツールは、許可されたセキュリティテストおよび教育目的のみ を対象としています。 明示的な許可なくシステムに対して使用しないでください。誤用は違法となる可能性があります。 ✅ 要件 Python 3.x requests モジュール 依存関係をインストール: pip install requests python CVE-2025-1323.py Enter target URL e.g. https://target.com/wp-admin/admin-ajax.php:...
CVE-2026-105856 Payload: SQL injection in SQLite/Postgres
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...
CVE-2026-105856
The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...
CVE-2026-105856 Payload: SQL injection in SQLite/Postgres
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...
CVE-2026-105845
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...
cs4239-cve-2020-15873
CVE-2020-15873 CVE-2020-15873 の概念実証 - Librenms librenms librenms 開発 LibreNMS Docker インスタンスのデバッグ 1. コンテナへのシェルを取得します: $ sudo docker exec -it librenmsvuln /bin/bash 2. LibreNMS が生成するログを読み取るには: $ tail -f /opt/librenms/logs/librenms.log MariaDB Docker インスタンスのデバッグ 1. コンテナへのシェルを取得します: $ sudo docker exec...
Payload: SQL Injection in SQLite and Postgres
Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...
NPM: Payload: SQL Injection in SQLite and Postgres
NPM: Payload: SQL Injection in SQLite and Postgres vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.88.0...
GHSA-V49J-62M6-PGRR Payload: SQL Injection in SQLite and Postgres
Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB @payloadcms/mongodb...
CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...
EUVD-2026-93487
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...
CVE-2026-105957
A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...
CVE-2026-105845
The Payload headless content management system is vulnerable to SQL injection in its SQLite and Postgres adapters. This vulnerability affects versions 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27 . An untrusted user capable of querying readable collections via dynamic filters or...
EUVD-2026-93471
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...
CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...
CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...
CVE-2026-105845 Payload: SQL Injection in SQLite and Postgres
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...
cve-2026-9082
CVE-2026-9082 タイプ : SQLインジェクション CWE-89 影響を受ける製品 : Drupal Core データベース抽象化API Drupal Advisory : SA-CORE-2026-004 公開日 : 2026年5月20日 深刻度 : 非常に重大 Drupal 20/25 | NVD CVSS 6.5 概要 CVE-2026-9082は、Drupalのコアデータベース抽象化APIにおけるSQLインジェクション...
CVE-2026-23921
CVE-2026-23921 — Zabbix 時間ベースのブラインド SQL インジェクション 影響を受けるバージョン: Zabbix 50 THEN pgsleep3 ELSE pgsleep0 END-- 使用方法 PostgreSQL バックエンド（デフォルト） python exploitCVE-2026-23921.py \ --url http://TARGET/apijsonrpc.php \ --user Admin --password zabbix --db pgsql MySQL バックエンド python exploitCVE-2026-23921.py ...