CVE-2026-104389

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2020-0618_DETECTION

CVE-2020-0618 - إثبات مفهوم للكشف عن RCE في Microsoft SQL Server Reporting Services SSRS 📜 الوصف هذا إثبات مفهوم بسيط لكشف CVE-2020-0618 ، وهي ثغرة تنفيذ تعليمات برمجية عن بُعد تؤثر على Microsoft SQL Server Reporting Services SSRS. توجد الثغرة بسبب التحقق غير السليم من المسار في واجهة برمجة...

Important: Red Hat Security Advisory: mariadb-connector-c security update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

CVE-2018-17254

CVE-2018-17254 عنوان الاستغلال: Joomla JCK Editor 6.4.4 - حقن SQL عبر 'parent' دليل جوجل: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ صفحة البائع: http://docs.arkextensions.com/downloads/jck-editor الإصدار: 6.4.4 تم الاختبار على: Debian 10 Ubuntu Windows 11/10 CVE : CVE-2018-17254 إصدار P...

EUVD-2026-92328

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-104389

The Sirv WordPress plugin versions up to and including 8.2.5 are vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation allows an attacker to execute arbitrary SQL commands. No specific exploit...

WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...

CVE-2025-55885

CVE-2025-55885 الوصف ثغرة حقن SQL في Alpes Recherche et Developpement ARD GEC en Ligne قبل الإصدار v.2025-04-23 تسمح لمهاجم عن بعد بتصعيد الامتيازات عبر معاملات GET في index.php نواقل الهجوم حقن SQL عبر معامل GET غير المنقى ocid على https://services.ard.fr/index.php صفحة تأكيد المعاملة. إثبات...

CVE-2026-104408 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

EUVD-2026-92314

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

CVE-2026-104408 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3...

CVE-2026-104408

The Groundhogg WordPress plugin, affecting versions up to and including 4.8.3 , is susceptible to a Blind SQL Injection vulnerability. The root cause is the Improper Neutralization of Special Elements used in an SQL command. This flaw allows an attacker with high privileges to perform SQL injecti...

WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...

CVE-2025-64459-Poc

CVE-2025-64459: إثبات المفهوم لـ حقن SQL في Django ORM الثغرة: حقن SQL عبر فك توسيع وسيطات الكلمة المفتاحية لـ QuerySet و Q. معرف CVE: CVE-2025-64459 المُكتشِف: أنا Cyberstan تاريخ الإفصاح: 5 نوفمبر 2025 🚨 الملخص التنفيذي يحتوي هذا المستودع على إثبات مفهوم PoC مُحتَوٍ في Docker يُظهر ثغرة حقن SQL...

CVE-2026-105254

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unspecified function of the /admin/schoolyear.php file, where manipulation of the sy argument allows for remote exploitation. While an exploit is reported as publicly available, sp...

CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

EUVD-2026-92297

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...