272514 matches found
CVE-2026-59550
CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 inyección SQL no autenticada Inyección SQL ciega basada en tiempo no autenticada en el plugin de WordPress AWP Classifieds another-wordpress-classifieds-plugin, accesible a través del flujo anónimo invitado de envío de anuncios por AJAX del plugin. | ---|-...
CVE-2025-32429-Checker
CVE-2025-32429 Vulnerability Checker A Python-based vulnerability scanner for detecting CVE-2025-32429 SQL injection vulnerability in XWiki platforms. Features Single Target Scanning : Check individual targets with -t option Bulk Scanning : Scan multiple targets from a file with -l option WAF...
CVE-2023-25157-GeoServer-SQLi-Lab
GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno de práctica Laboratorio Vulnerable e informe detallado de análisis de explotación de la vulnerabilidad SQL Injection Error-based en GeoServer CVE-2023-25157 y la biblioteca...
day05-grafana-sqlexpr-lab
Day 5 – Grafana SQL Expressions → DuckDB LFI CVE-2024-9264 TL;DR: On affected Grafana 11.x builds, a logged-in Viewer can use SQL Expressions. Grafana forwards the expression to DuckDB on the server. With readtext / readblob, you can read local files LFI. We plant a flag at /opt/flag.txt. Build →...
CVE-2026-4889
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
CVE-2026-42416
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
CVE-2026-42415
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
CVE-2026-42417
Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...
CVE-2026-42414
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-39795
Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...
CVE-2026-39785
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
CVE-2026-39771
Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...
CVE-2026-39764
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...
CVE-2026-39747
Subscriber SQL Injection in Woffice = 5.4.35 versions...
CVE-2026-39746
Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...
CVE-2026-32581
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions...
CVE-2026-32580
Unauthenticated SQL Injection in WooCommerce Lottery = 2.2.9 versions...