API-attack-detection-with-AI

Rilevamento di attacchi SQL/XSS su API Web con intelligenza artificiale / machine learning Questo progetto mira a rilevare le iniezioni SQL e XSS in richieste/parametri API utilizzando il machine learning. Presentazione del progetto Questo progetto mira a rilevare le iniezioni SQL e XSS in...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi non autenticato a Root RCE Gravità: Critico Tipo: SQL Injection non autenticata → Esecuzione remota di codice Software interessato: FreePBX modulo endpoint Testato su: FreePBX su CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Panoramica Esiste una vulnerabilità di SQL...

CVE-2026-105184 itsourcecode Online Admission System creteria.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-105184

A security vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/creteria.php file. Improper handling of the ID argument allows for a SQL injection attack, which can be launched remotely. Public exploits for this vulnerability have been disclose...

CVE-2026-105184 itsourcecode Online Admission System creteria.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

EUVD-2026-92244

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-42284

Disclaimer Solo a scopo educativo! Dettagli Prova di concetto per CVE-2023-42284. Tyk Gateway è vulnerabile a SQL injection. Risolto nella versione 5.0.7. Il parametro URL ‘apiversion’ di "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..." è vulnerabile a SQL injection cieca...

unknownpwn.github.io

Vulnerabilità ed Exploit dei LED Video Wall Tecnovision. Dalla SQLi al pieno accesso root. Introduzione: Tecnovision è un produttore di LED Video Wall utilizzati negli stadi per esempio, il Twickenham Stadium, nelle sale da concerto, nei centri commerciali, come segnaletica stradale e molto altro...

CVE-2026-105183

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /admin/confirm.php file. The flaw is caused by improper handling of the schedid argument, which allows for remote exploitation. Public exploit code is available, though no specif...

CVE-2026-105183 itsourcecode Online Admission System confirm.php sql injection

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-105183 itsourcecode Online Admission System confirm.php sql injection

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

EUVD-2026-92243

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-63039

CVE-2026-63039 — Apache InLong AuditAlertRule SQL-Injektion in ORDER BY Ausführbarer Proof-of-Concept-Reproduktionscode für die SQL-Injektion in der Audit-Alert-Rule-Abfrage von Apache InLong. Der InLong-Manager-Mapper AuditAlertRuleEntityMapper.selectByCondition filtert mit sicheren...

CVE-2026-105182 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2026-105182

A security flaw exists in SourceCodester Online Reviewer Management System 1.0 within the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. An SQL injection vulnerability is triggered by manipulating the Title argument. This flaw can be exploited remotely, and the ex...

CVE-2026-105182 SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

EUVD-2026-92178

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2022-41853

Forschung zu CVE-2022-41853: Nutzung statischer Funktionen zur Erlangung von RCE per Java-Deserialisierung und Remote-Codebase-Angriff Wer java.sql.Statement oder java.sql.PreparedStatement in hsqldb HyperSQL DataBase verwendet, um nicht vertrauenswürdige Eingaben zu verarbeiten, ist möglicherwei...

CVE-2026-105177

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

CVE-2026-105178

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqlirealescapestring of the file /Admin/addsymptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It is...