UBUNTU-CVE-2026-46531

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...

OpenProject SQL Injection

The vulnerability in the OpenProject project management platform is related to the lack of safeguards for SQL query structures. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-125523

OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL through the projectId parameter of the /live/visitors/:projectId WebSocket, which lacks session and project-access checks. Attackers can use UNION or boolean count...

PT-2026-125513

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping by injecting unescaped profile filter names into a JOIN subquery. Attackers can supply a crafted filter name with a trailing comment to bypass the project id WHERE clause and re...

PT-2026-123158

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

VulnCheck KEV: CVE-2026-66592

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Blind SQL Injection.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.11...

VeloCloud Orchestrator SQL Injection Privilege Escalation

The vulnerability in the locally deployable version of the VeloCloud Orchestrator VCO On-Premises management platform for VMware SD-WAN by VeloCloud is related to improper handling of SQL query structures. Exploitation of this vulnerability may allow a remote attacker to escalate their privileges...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

CVE-2025-32429

CVE-2025-32429 XWiki SQL Injection PoC Author: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑32429 Vulnerability: Blind SQL Injection in XWiki LiveData REST API Affected File: getdeleteddocuments.vm sort parameter Description : A blind SQL Injection vulnerability exists in XWiki Platform’s...

CVE-2026-116061

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116062

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062

A security flaw exists in SourceCodester Performance Indicator System 1.0 involving a SQL injection vulnerability. The issue is triggered by the manipulation of the Contact argument during processing of the file /opils/staff/save_profile.php. This vulnerability can be exploited remotely to compro...

EUVD-2026-109564

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/saveprofile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-116060

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-116061 SourceCodester Performance Indicator System edit_dealer.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116061

The SourceCodester Performance Indicator System 1.0 is vulnerable to a SQL injection vulnerability within the /opils/staff/edit_dealer.php file. The flaw is caused by the improper handling of the Contact argument, allowing an attacker to execute malicious SQL commands. This attack can be initiate...

EUVD-2026-109563

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly...