CVE-2026-105921

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

Final-project-SQL-injection-pipeline

Обнаружение SQL-инъекций — гибридные ML-конвейеры Исходный код магистерской диссертации: Enhancing Web Application Firewall with Machine Learning for SQL Injection Detection | ---|--- Автор| Lilliane Linnet Musoke Учреждение| Университет Рединга, факультет компьютерных наук Программа| MSc Data...

Exploit for CVE-2026-67401

CVE-2026-67401 — cPanel/WHM EmailTrack SQL Injection → Root RC...

CVE-2026-105920

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105921

A SQL injection vulnerability exists in the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2) within an unknown function of the search_class.php file. The flaw is triggered by manipulating the school_year argument and can be launched remotely . While ...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

EUVD-2026-93423

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

wp2shell-vulnerability-scanner

WP2Shell Scanner Read-only, неразрушающий инструмент аудита безопасности, который сканирует установки WordPress на наличие цепочки уязвимостей wp2shell. Обзор WP2Shell Scanner — это bash-утилита, которая рекурсивно ищет установки WordPress в дереве каталогов и проверяет, использует ли каждый сайт...

CVE-2026-39492

CVE-2026-39492 — Сканер слепой SQL-инъекции WP Maps Слепая time-based SQLi без аутентификации через обход с обратными кавычками → извлечение БД Обзор CVE-2026-39492 — критическая CVSS 9.3 слепая SQL-инъекция без аутентификации в плагине WP Maps wp-google-map-plugin версий ≤ 4.9.1. AJAX-обработчик...

CVE-2024-51482-POC

ZoneMinder POC d'injection SQL basée sur le temps avec authentification - CVE-2024-51482 ⚠️ À des fins éducatives et de recherche en sécurité autorisée uniquement. Exécuter cet outil contre des systèmes dont vous n'êtes pas propriétaire ou sans autorisation écrite est illégal. Table des matières...

CVE-2024-13478

CVE-2024-13478 LTL Freight Quotes – TForce Edition = 3.6.4 - Неаутентифицированная SQL-инъекция Описание Плагин LTL Freight Quotes – TForce Edition для WordPress подвержен SQL-инъекции через параметры 'dropshipeditid' и 'editid' во всех версиях до 3.6.4 включительно из-за недостаточного...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Плагин Acyber Wordpress !WARNING Временное экстренное смягчение для CVE-2026-60137 и CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 Описание на английском Этот легковесный плагин WordPress служит временной виртуальной заплаткой смягчением против критической...

POC-AIOWPM-CVE-2026-19949

CVE-2026-19949 — Prueba de concepto documentada y reproducible en Docker Inyección SQL de segundo orden no autenticada en All-in-One WP Migration and Backup WordPress que escala a filtrado de la ai1wmsecretkey y, con ella, a ejecución remota de código RCE. Lee esto en: English · Español | ---|---...

EUVD-2026-93414

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105920 Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105920 Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105920

A SQL injection vulnerability exists in the Student Registration Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located within an unknown function in the student_signup.php file. This vulnerability allows for remote att...

CVE-2026-105919

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...