CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2026-105918

A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...

CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7

New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9

New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8

New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-49048-JoomCCK-SQLi

CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection CVSS 9.8 CVE: CVE-2026-49048 Status: Public disclosure. Reported to Joomla Security Strike Team JSST — Ticket 282420. Advisory Summary Field| Value ---|--- Advisory ID| JOOMCCK-2026-001 CVE| CVE-2026-49048 Product| JoomCCK comjoomcck —...

CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-مع-تصحيح-الأخطاء تم تصحيح الأكسلويت لدعم بايثون 3 CVE-2019-9053 مصدر الأكسلويت الأصلي: https://www.exploit-db.com/exploits/46635 خطأ محتمل وتصحيحه Traceback most recent call last: File "46635.py", line 12, in from termcolor import colored ImportError...

patch-CVE-2026-03200

Correctif : CVE-2026-03200 Détails de la vulnérabilité CVE : CVE-2026-03200 Produit : Progress MOVEit Description : Injection SQL Gravité : Critique Statut du correctif : DÉPLOYÉ Champ| Valeur ---|--- Date du correctif| 2026-01-15 Statut| déployé Déployé sur| Production Validé par| Équipe SecOps...

Security Bulletin: Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS

Summary Vulnerabilities in PostgreSQL could allow Memory Corruption/Arbitrary Code Execution CVE-2026-14662, CVE-2026-14664, CVE-2026-14669, CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679, CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385, Information Disclosure...

CVE-2025-45809-PoC

CVE-2025-45809 — Injection SQL LiteLLM via /key/block SQLi aveugle basée sur le temps LiteLLM v1.65.4 versions antérieures à v1.81.0 — le paramètre key des points de terminaison /key/block et /key/unblock présente une vulnérabilité d'injection SQL. Un attaquant peut exploiter une injection aveugl...

cve-2026-28576

CVE-2026-28576 : Injection SQL dans Android Contacts Provider et exfiltration systémique Résumé exécutif CVE-2026-28576 est une vulnérabilité critique de contrôle d'accès dans le framework Android Contacts Provider ContactsProvider2.queryLocal. La faille permet à une application non privilégiée...

CVE-2026-9082

CVE-2026-9082 حقن SQL غير مصادق عليه في نواة دروبال على PostgreSQL عبر POST /user/login، مع التصعيد إلى تنفيذ أوامر عن بُعد من خلال PostgreSQL sessionpreloadlibraries. على عكس الاستغلالات العامة الموجودة التي تستهدف JSON:API، يستخدم هذا الاستغلال نقطة تسجيل الدخول — المتاحة دائماً، بدون الحاجة إل...

CVE-2026-36826

CVE-2026-36826 : Injection SQL dans genesisQL = 1.1.1 Résumé genesisQL 1.1.1 est vulnérable à une injection SQL dans la fonction checkPassword. Les champs username et password fournis par l'utilisateur sont interpolés directement dans la chaîne de requête SQL sans paramétrage, permettant une...

CVE-2026-37149

CVE-2026-37149 Injection SQL dans GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Aperçu Identifiant CVE : CVE-2026-37149 Type de vulnérabilité : Injection SQL CWE-89 Sévérité : Élevée Découvreur : Dhyey Patel Description...

WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by neurotx in WordPress Plugin Events Manager versions = 7.4.6...

abdal-cve-2026-60137

English | فارسی 🛡️ Exploits PoC Abdal CVE-2026-60137 Abdal CVE-2026-60137 est un vérificateur défensif d'exposition WordPress pour l'assainissement insuffisant du paramètre authornotin dans WPQuery, suivi sous le nom de CVE-2026-60137. La vulnérabilité peut permettre une injection SQL lorsque des...