CVE-2025-22953

CVE-2025-22953 – حقن SQL أعمى غير مصادق عليه في Epicor HCM تحديث – تم إصدار تصحيح من Epicor أصدرت Epicor رسميًا تصحيحًا يعالج هذه الثغرة. يُنصح بشدة جميع المستخدمين المتأثرين بتطبيق التحديث فورًا. 🔗 إعلان تصحيح أمان Epicor ملخص توجد ثغرة حقن SQL أعمى غير مصادق عليها في برنامج Epicor HCM ، الإصدار...

litellm-sqli-scanner

ماسح حقن SQL الخاص بـ LiteLLM CVE-2026-42208 — ثغرة حقن SQL في خادم LiteLLM Proxy يكتشف ويتحقق من CVE-2026-42208: ثغرة حقن SQL في طبقة قاعدة بيانات خادم LiteLLM Proxy. للاستخدام في الاختبارات الأمنية المصرح بها فقط. الميزات اكتشاف حقن SQL CVE-2026-42208 تحديد إصدار خادم LiteLLM Proxy حمولات التحق...

CVE-2026-63030

Wordpress कोर / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 PoC अब प्रकाशित हो चुका है। इसे केवल शैक्षिक/अनुसंधान उद्देश्यों के लिए बनाया गया था! इसका उपयोग अपने जोखिम पर करें!...

CVE-2026-105472

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE_POC_test

CVEPOCtest CVE-2019-13086 भेद्यता का पुनरुत्पादन और poc प्रयोग कोड मूल CVE जानकारी: https://vulners.com/cve/CVE-2019-13086 प्रयोग वातावरण: CSZ CMS आर्किटेक्चर + php5.4 + MySQL 5.5 + Apache 2.4 भेद्यता प्रकार: SQL इंजेक्शन भेद्यता फ़ाइल अपलोड भेद्यता संक्षिप्त विवरण:...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c अवलोकन CVE-2026-26980 TryGhost Ghost CMS Content API में एक अप्रमाणित SQL Injection भेद्यता है। कमजोर पथ सार्वजनिक Content API फ़िल्टर...

CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection

7. CVE-2026-5432 – حقن SQL عبر الخلط بين الأسماء المستعارة في دفعات GraphQL نظرة عامة يقوم مُحلّ GraphQL ببناء استعلامات SQL ديناميكيًا من الأسماء المستعارة للحقول. وباستخدام الدُفعات والأسماء المستعارة، يتمكن المهاجم من تجاوز قائمة السماح وحقن SQL. الخطورة: حرجة السيطرة على قاعدة البيانات خادم...

phpMyAdmin-CVE-2020-5504-Exploit

CVE-2020-5504 phpMyAdmin Security Assessment Tool Cadre de tests de sécurité et de recherche autorisés pour identifier et valider CVE-2020-5504 dans les déploiements phpMyAdmin Vue d'ensemble · Fonctionnalités · Installation · Utilisation · Rapports · Architecture · Contribution Avis d'utilisatio...

CVE-2026-60137

wpsqli - مستخرج SQLi لووردبريس CVE-2026-60137 أداة سريعة لاستخراج قواعد البيانات تعمل عبر قائمة تفاعلية، تستغل ثغرة حقن SQL في authornotin داخل نواة ووردبريس. تركز الأداة حصريًا على تعداد قواعد البيانات وتفريغها، مستغلةً اختلاط مسارات REST للدفعات CVE-2026-63030 للوصول إلى نقطة حقن SQLi دون مصادق...

Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS

IBM SECURITY ADVISORY First Issued: Tue Oct 6 01:00:55 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/postgresadvisory2.asc Security Bulletin: Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS...

EUVD-2026-92875

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

EUVD-2026-92840

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

EUVD-2026-92841

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

EUVD-2026-92816

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

EUVD-2026-92897

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472

A SQL injection vulnerability exists in the Booking Handler component of the girishsaraf Online-Appointment-Booking-System (versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ). The flaw is located within an unknown function in the book.php file, where the manipulation of the Doctor/appointm...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105472 girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking Handler. This manipulation of the argument Doctor/appointment causes sql...

CVE-2026-105471

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...