287186 matches found
CVE-2026-105779
Adobe Campaign Classic (ACC) is impacted by a SQL Injection vulnerability (CWE-89) due to the improper neutralization of special elements in an SQL command. A low-privileged attacker can exploit this issue to bypass security measures, resulting in unauthorized read and limited write access . The ...
EUVD-2026-111226
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...
EUVD-2026-111224
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...
CVE-2026-104354 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...
EUVD-2026-111222
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
CVE-2026-117514 oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
CVE-2026-117514 oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
CVE-2026-117514
A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the Admin Record Pages component. Specifically, the processing of the file admin/customer_detail.php allows for the manipulation of arguments including costomer_id, ticket_id, emp_id, salary_id, and page_id to e...
CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
EUVD-2026-111105
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
CVE-2026-117513
The oretnom23 php-travel-agency-system is vulnerable to an SQL injection vulnerability within the Admin Search Pages component, specifically affecting the file admin/customer_search.php. An attacker can perform a remote attack by manipulating the customer_name, voucher_no, or emp_name arguments. ...
EUVD-2026-111123
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...
CVE-2026-106076
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...
CVE-2026-106076
An SQL injection vulnerability exists in the Veeam Backup for Microsoft 365 server. An authenticated organization-transfer peer can inject SQL commands into the configuration database of the source server. This flaw allows for cross-tenant read and write of configuration data and potentially enab...
sccm_sql_backdoor
sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. $ git clone...
CVE-2026-40083
SQL Injection in Cacti managers.php A proof-of-concept exploit for CVE-2026-40083, a SQL Injection vulnerability in Cacti's managers.php that allows any authenticated user with SNMP Manager permissions to read the entire MySQL database including user credentials and password hashes. Usage: Verify...
hackingtoolkit
All in One Hacking toolKit For Hackers, Penetration Tester and CyberSecurity 🥇 Install Kali Linux in WIndows10 Without VirtualBox YOUTUBE Update Available 3.0 ✔ Installation Bug Fixed Added New Tools 200 + Additional Tools Updating Everyday Added Tool in wifijamming Added Tool in steganography Pu...
Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE — Detect
Fingerprint / reachability check for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE""" from kittysploit import from lib.protocols.http.httpclie...
Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE
Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE """Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE""" from future import annotations from kittysploit import import os, sys, socket, hashlib, base64, time import time import re import...