CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277

LibreOffice Calc is vulnerable to Remote Code Execution (RCE) when opening a document that links a cell range to an external data source. An attacker can craft a document naming a Java database driver to be loaded from a remote location, causing the application to execute Java code from that sour...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - Vulnérabilité d'injection SQL dans editcustomer via le paramètre 'id' de l'URL Description : Une vulnérabilité d'injection SQL existe dans la version 1 du Système de Support Client. Un attaquant malveillant peut exécuter des commandes SQL sur la base d...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root PoC couvrant toute la chaîne d'exploitation pour CVE-2025-57819. Une injection SQL non authentifiée basée sur les erreurs dans le module endpoint de FreePBX débouche sur un shell root via l'injection d'une tâche cron et l'escalade de privilèges incron...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Injection SQL non authentifiée Description Le plugin Fancy Product Designer pour WordPress est vulnérable à l'injection SQL dans les versions jusqu'à la 6.4.3 incluse, en raison d'un échappement insuffisant du paramètre fourni par l'utilisateur et...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 Функциональный PoC для уязвимости CVE-2024-9796, затрагивающей плагин WP Advanced Search автодополнение в WordPress и позволяющей выполнить SQL-инъекцию SQL Injection через несанитизированные GET-параметры. 📌 Описание Эта уязвимость позволяет атакующему...

CVE-2026-63030

CVE-2026-63030 WordPress REST Batch Route-Confusion SQL Injection CVE-2026-63030 — доказательство концепции Исследование, разработка эксплойта и документация:Ch4120N ⚠️ Правовое уведомление Этот репозиторий и сопутствующий инструмент exploit.py предназначены строго для образовательных целей,...

WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Deva Parekh in WordPress Plugin Paid Member Subscriptions versions = 3.1.1...

CVE-2019-9053-port-py3

CVE-2019-9053 Exploit - Python 3 Il s'agit d'un portage en Python 3 de l'exploit CVE-2019-9053, qui cible CMS Made Simple CMSMS dans les versions antérieures à 2.2.10. La vulnérabilité permet une injection SQL via l'interface du module News. Exemple de sortie Testé sur le TryHackMe Simple CTF...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

Important: Red Hat Security Advisory: mariadb-connector-c security update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Auteur de l'exploit : ersinerenler Page d'accueil du fournisseur https://code-projects.org/blood-bank-in-php-with-source-code Lien du logiciel https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2026-105287

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-105287 feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

EUVD-2026-92386

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-105287

A SQL injection vulnerability exists in feelec-yishu feelcrm-os 1.0.0 within the getMemberByGroups endpoint. The flaw is caused by the manipulation of the groups[] argument in an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php . This vulnerability can be ex...

CVE-2026-105287 feelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-42647-Lab

CVE-2026-42647 - Injection SQL aveugle temporelle non authentifiée via sortf dans JoomSport Résumé exécutif Ce dépôt contient un laboratoire Docker local pour reproduire et valider CVE-2026-42647, une vulnérabilité d'injection SQL non authentifiée affectant le plugin WordPress JoomSport - for...