CVE-2026-5076

CVE-2026-5076 - Vulnerabilidade de Redefinição de Senha do ARMember Informações da Vulnerabilidade Item| Detalhe ---|--- ID CVE| CVE-2026-5076 Plugin| ARMember – Membership Plugin & Content Restriction Versão Afetada| Premium = 7.3.1 Versão Corrigida| 7.3.2 Pontuação CVSS| 9.8 Crítico CWE| CWE-64...

wp2shell

wp2shell-check CVE-2026-63030 / CVE-2026-60137 "wp2shell" के लिए गैर-हस्तक्षेपी जाँचकर्ता, जो WordPress कोर में एक प्री-ऑथेंटिकेशन RCE श्रृंखला है REST API बैच-रूट कन्फ्यूज़न → SQL injection → RCE। प्रभावित: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 बीटा पूर्ण RCE श्रृंखला; 6.8.0–6.8.5 केवल SQL...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503: exploração de injeção SQL não autenticada CVE-2025-59213 Este script explora a vulnerabilidade CVE-2025-59213, que permite que um atacante não autenticado com acesso de rede a um Management Point execute consultas SQL arbitrárias no banco de...

RLSA-2026:75673 Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

mariadb-connector-c security update

An update is available for mariadb-connector-c. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The MariaDB Native Client library C driver is used to connect...

RLSA-2026:75674 Important: mariadb-connector-c security update

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 For more details...

mariadb-connector-c security update

An update is available for mariadb-connector-c. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The MariaDB Native Client library C driver is used to connect...

CVE-2026-105776

A SQL injection vulnerability exists in the bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL web application. The flaw is located in an unknown functionality of the /admin_transaction.php file, where manipulation of the Username argument allows for remote code execution via S...

EUVD-2026-92963

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...

Advanced-SQL-Injection-Cheatsheet

MySQL Error based SQL Injection Cheatsheet यह शायद SQL Injection हमले के अंतर्गत सबसे आसान कमज़ोरी है। एक हमलावर अपने लाभ के लिए SQL त्रुटि संदेशों का उपयोग करके MySQL डेटाबेस को enumerate और dump कर सकता है। कमज़ोरी का पता लगानाhttp://domain.com/index.php?id=1 Website loads successfully...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Não Autenticado Resumo As versões 15, 16 e 17 do FreePBX contêm uma vulnerabilidade de Execução Remota de Código RCE causada por sanitização insuficiente de dados fornecidos pelo usuário em endpoints. Um atacante não autenticado pode manipular o banco de dados e obter execução...

CVE-2024-51482-PoC

CVE-2024-51482-PoC Exploit de injeção SQL cega baseada em tempo autenticado para ZoneMinder v1.37. = 1.37.64 Visão Geral Este é um exploit de prova de conceito para CVE-2024-51482, uma vulnerabilidade de injeção SQL cega baseada em tempo na funcionalidade de gerenciamento de eventos do ZoneMinder...

wp2shell

🔍 wp2shell - Scanner e Exploit de Vulnerabilidade WordPress CVE-2026-63030 ⚡ Scanner e Exploit de Vulnerabilidade em Tempo Real e Rápido para CVE-2026-63030 wp2shell 📌 Visão Geral wp2shell é um kit de ferramentas abrangente para detectar e explorar CVE-2026-63030 , uma vulnerabilidade crítica no...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple केवल शैक्षिक उद्देश्यों और अधिकृत सुरक्षा परीक्षण के लिए।...

CVE-2025-68999-POC

CVE-2025-68999 Elementor के लिए Happy Addons prepare के साथ सुरक्षित रूप से प्राप्त करता है, लेकिन फिर $entry-metakey को बिना एस्केप किए सीधे SQL स्ट्रिंग में डाल देता है: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; चूँकि metakey डेटाबेस से आता है, को...

atutor-blind-sqli

ATutor v2.2.1 Injeção SQL Cega Explorando CVE-2016-2555 enumerando e extraindo o banco de dados subjacente. Aviso de Isenção Todas as informações fornecidas neste post são apenas para fins educacionais. Você não deve usar indevidamente as informações para obter acesso não autorizado e/ou escrever...

wp2shell

wp2shell - PoC de RCE no WordPress CVE-2026-63030 + CVE-2026-60137 Execução Remota de Código não Autenticada no WordPress Core por: JohenLastGen 📌 Visão Geral Esta ferramenta encadeia duas vulnerabilidades críticas do WordPress para obter RCE não autenticado : Vulnerabilidade| CVE| Descrição...