CVE-2026-112837 WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

CVE-2026-112837 WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

Exploit for CVE-2026-31158

CVE-2026-31158 Unauthenticated Boolean-Based SQL Injectio...

Exploit for SQL Injection in Openproject

CVE-2026-34717 — Boolean-based Blind SQLi Exploit Mô tả S...

FreeBSD: VID-9647af6d-7a05-11f1-99fc-40b034429ecf (CVE-2026-46531): cacti -- multiple vulnerabilities

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...

WordPress GamiPress SQL injection vulnerability

WordPress GamiPress versions 8.0.7 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

PT-2026-122141

Name of the Vulnerable Software and Affected Versions Cacti versions 1.2.27 through 1.2.30 Description An authenticated stored second-order SQL injection exists in the automation tree rule item handler. A user with the Automation realm General Administration role can store an arbitrary SQL fragme...

Cacti SQL injection vulnerability

Versions 1.2.27 through 1.2.31 of Cacti contain an SQL injection vulnerability. This vulnerability stems from an authenticated stored second-stage SQL injection within the automated tree rule item handler. Users with Automation privileges can persist arbitrary SQL fragments into the...

PT-2026-121792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7...

ServiceNow AI Platform Multiple Vulnerabilities (August 2026 CVE Advisory)

The version of the ServiceNow AI Platform Now Platform running on the remote host is missing the remediations described in the August 2026 CVE Advisory Notification. It is, therefore, affected by multiple vulnerabilities, including the following: - A sandbox escape vulnerability that could allow ...

OpenProject 17.2.2 Boolean-based Blind SQL Injection

OpenProject versions prior to 17.2.3 contain an SQL injection vulnerability in the Cost Reporting =n operator. This proof of concept uses boolean-based blind SQL injection to extract data through a Cost Report request. https://packetstorm.news/download/237275...

Anuko Time Tracker 1.20.0.5640 SQL Injection

Anuko Time Tracker versions prior to 1.20.0.5642 contain an authenticated SQL injection vulnerability in the Puncher plugin. A proof of concept is provided to inject a scalar SQL query through the date parameter and read its result. https://packetstorm.news/download/237259...

PT-2026-122100

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

Arista VeloCloud Orchestrator SQL Injection Vulnerability

Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data...

FreeBSD: VID-9647af6d-7a05-11f1-99fc-40b034429ecf (CVE-2026-46531): cacti -- multiple vulnerabilities

Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm default General Administration role can...

Super Store Finder 3.8 SQL Injection

Super Store Finder version 3.8 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: Super Store Finder 3.8 - Multiple SQL Injection Exploit Author: CraCkEr Date: 26/08/2026 Vendor: highwarden Vendor Homepage: https://codecanyon.net/item/super-store-finder/3630922 Software...

CVE-2026-79858

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service...

CVE-2026-79854

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79852

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79849

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...