EyesOfNetwork - Hardcoded API Key & SQL Injection

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/apifunctions.php. id: CVE-2020-8656 info: name:...

CVE-2025-22953

CVE-2025-22953 – Injeção SQL Cega Não Autenticada no Epicor HCM Atualização – Patch Lançado pela Epicor A Epicor lançou oficialmente um patch corrigindo essa vulnerabilidade. Todos os usuários afetados são fortemente aconselhados a aplicar a atualização imediatamente. 🔗 Anúncio do Patch de...

litellm-sqli-scanner

LiteLLM SQL इंजेक्शन स्कैनर CVE-2026-42208 — LiteLLM Proxy में SQL इंजेक्शन CVE-2026-42208: LiteLLM Proxy की डेटाबेस परत में SQL इंजेक्शन भेद्यता का पता लगाता है और सत्यापित करता है। केवल अधिकृत सुरक्षा परीक्षण के लिए। विशेषताएँ CVE-2026-42208 SQL इंजेक्शन जाँच LiteLLM Proxy संस्करण फ़िंगरप्रिंटि...

CVE-2026-63030

Wordpress Core / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 O PoC agora foi publicado. Foi criado apenas para fins educacionais/de pesquisa! Use por sua conta e risco!...

CVE-2026-105472

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE_POC_test

CVEPOCtest Reprodução da vulnerabilidade CVE-2019-13086 e código experimental do PoC Informações originais do CVE: https://vulners.com/cve/CVE-2019-13086 Ambiente experimental: Arquitetura CSZ CMS + php5.4 + MySQL 5.5 + Apache 2.4 Tipo de vulnerabilidade: Vulnerabilidade de injeção de SQL...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 Prova de Conceito de Injeção SQL na API de Conteúdo do TryGhost Ghost CMS ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Visão Geral CVE-2026-26980 é uma vulnerabilidade de Injeção SQL não autenticada na API de Conteúdo do TryGhos...

CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection

7. CVE-2026-5432 – GraphQL बैचिंग एलियास कन्फ्यूज़न SQL इंजेक्शन अवलोकन एक GraphQL रिज़ॉल्वर फ़ील्ड एलियास से SQL क्वेरीज़ को गतिशील रूप से निर्मित करता है। बैचिंग और एलियास का उपयोग करके, एक हमलावर अनुमति‑सूची को बायपास करके SQL इंजेक्ट करता है। गंभीरता: क्रिटिकल डेटाबेस टेकओवर Node.js सर्वर और...

phpMyAdmin-CVE-2020-5504-Exploit

CVE-2020-5504 أداة تقييم أمان phpMyAdmin إطار عمل مصرّح به للاختبار الأمني والبحث لتحديد والتحقق من CVE-2020-5504 في نشرات phpMyAdmin نظرة عامة · الميزات · التثبيت · الاستخدام · التقارير · البنية · المساهمة إشعار الاستخدام المسؤول: هذا المشروع مخصص فقط للأنظمة التي تملكها أو التي لديك تفويض صريح...

CVE-2026-60137

wpsqli - WordPress SQLi एक्सट्रैक्टर CVE-2026-60137 WordPress कोर में authornotin SQL इंजेक्शन भेद्यता का शोषण करने वाला एक तेज़, मेनू-संचालित डेटाबेस निष्कर्षण उपकरण। यह उपकरण पूरी तरह से डेटाबेस एन्यूमरेशन और डंपिंग पर केंद्रित है, तथा SQLi सिंक तक बिना प्रमाणीकरण unauthenticated पहुँचने के लिए...

Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS

IBM SECURITY ADVISORY First Issued: Tue Oct 6 01:00:55 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/postgresadvisory2.asc Security Bulletin: Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS...

EUVD-2026-92875

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

EUVD-2026-92841

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

EUVD-2026-92840

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

EUVD-2026-92816

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

EUVD-2026-92897

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472

A SQL injection vulnerability exists in the Booking Handler component of the girishsaraf Online-Appointment-Booking-System (versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ). The flaw is located within an unknown function in the book.php file, where the manipulation of the Doctor/appointm...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...