dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

PT-2026-106363

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

PT-2026-107144

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...

PT-2026-106475

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-105957: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105920: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

RHEL 8 : Red Hat Single Sign-On 7.6.13 security update on RHEL 8 (Important) (RHSA-2026:76129)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76129 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

RHEL 9 : Red Hat Single Sign-On 7.6.13 security update on RHEL 9 (Important) (RHSA-2026:76130)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76130 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

RHEL 7 : Red Hat Single Sign-On 7.6.13 security update on RHEL 7 (Important) (RHSA-2026:76128)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76128 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

PT-2026-106406

Name of the Vulnerable Software and Affected Versions WooCommerce Lottery versions prior to 2.3.0 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — SQLi non autenticata a RCE Proof-of-concept exploit che incatena due vulnerabilità di FreePBX per passare da accesso zero a esecuzione di codice remoto su FreePBX 16. CVE| Componente| Impatto ---|---|--- CVE-2025-57819| Caricatore del modulo Endpoint parametro brand| SQL injection...

WP-Contest-Gallery-28.1.4-Exploit

⚠️ In fase di test Questo PoC è attivamente in fase di test e miglioramento. Le funzionalità possono cambiare tra le versioni. CVE-2026-3180 WordPress Contest Gallery — SQL Injection cieca non autenticata Strumento di valutazione proof-of-concept per CVE-2026-3180 Autore: Sudeepa Wanigarathna ·...

-CVE-2021-26904

CVE-2021-26904 LMA ISIDA Retriever 5.2 consente l'iniezione SQL Descrizione suggerita : "ISIDA RETRIEVER v5.2" Iniezione SQL Funzionalità vulnerabile : La piattaforma ISIDA RETRIEVER è vulnerabile all'iniezione SQL URL e parametro vulnerabile : website.com/index.php?title=Injection URL e parametr...

CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 Iniezione SQL in online-shopping-system L'applicazione online-shopping-system è vulnerabile ad attacchi di iniezione SQL non autenticati di tipo error/boolean-based blind ed error-based. Il parametro catid nella pagina /homeaction.php non sanitizza l'input dell'utent...

wp2shell-poc2

wp2shell-poc Proof-of-concept per un'iniezione SQL non autenticata nel core di WordPress che porta all'esecuzione remota di codice, tramite una route confusion del batch REST CVE-2026-63030. L'exploit non richiede credenziali né altra configurazione oltre a un target raggiungibile. Raggiunge...

CVE-2026-63030-wp2r00t

wp2r00t - Proof-of-Concept per SQL Injection Blind tramite Confusione di Rotta Batch in WordPress Un proof-of-concept autonomo per l'iniezione SQL blind non autenticata raggiungibile tramite l'endpoint batch REST di WordPress /wp-json/batch/v1. È un'implementazione indipendente costruita a partir...

WordPress--CVE-2022-21661

CVE-2022-21661 POC Video | WordPress Core 5.8.2 - 'WPQuery' SQL Injection CVE-2022-21661 EDB : https://www.exploit-db.com/exploits/50663...

CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 SQL Injection nel sistema hotel-mgmt-system Il sistema hotel-mgmt-system è vulnerabile ad attacchi non autenticati di SQL Injection blind basata sul tempo. Il parametro cid nella pagina /processupdateprofile.php non sanitizza l'input dell'utente; un attaccante può...

CVE-2024-42327

writeup CVE-2024-42327 vulnerabilità zabbix bersaglio: 10.129.231.176 Informazioni: So che il mio bersaglio è un server zabbix. Ho ricevuto un account utente predefinito per accedere a zabbix: utente matthew password 96qzn0h2e1k3. Questo account ha un utente predefinito, senza gruppi o privilegi...