287948 matches found
PT-2026-116505
A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del cache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to...
SLiMS 9.8.0 SQL Injection
SLiMS version 9.8.0 contains SQL injection vulnerabilities in the serial control subscription and reporting detail administration modules. The supplied proof of concept demonstrates authenticated error-based database version disclosure through unquoted numeric parameters...
Apache Log4j 1.2.17 JDBCAppender SQL Injection
Apache Log4j version 1.2.17 JDBCAppender contains an SQL injection vulnerability when an unescaped logging message is embedded in a JDBCAppender SQL pattern. This package provides an isolated H2 proof of concept and whitebox data-flow report. https://packetstorm.news/download/236092...
CVE-2026-104122: Improper Neutralization of Special Elements used in an SQL Command
The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks...
CVE-2026-107752: Improper Neutralization of Special Elements used in an SQL Command
The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wpuscesorderold JSON fields searchSql / searchSkuSql' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...
SLiMS 9.8.0 Admin Bibliography SQL Injection
SLiMS version 9.8.0 contains an SQL injection vulnerability in its admin bibliography module via unquoted opachide and promoted GET parameters, allowing authenticated staff users to extract database information. https://packetstorm.news/download/236103...
CVE-2026-55796
Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...
CVE-2026-100351 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, grafana, crossplane-provider-family-aws, kubevela, nuclei, crossplane-provider-aws-rds, crossplane-provider-aws-lambda, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...
GHSA-23VG-4CJM-66Q5 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, grafana, crossplane-provider-family-aws, kubevela, nuclei, crossplane-provider-aws-rds, crossplane-provider-aws-lambda, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...
GHSA-MH7X-F8WQ-4JHX vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, grafana, crossplane-provider-family-aws, kubevela, nuclei, crossplane-provider-aws-rds, crossplane-provider-aws-lambda, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...
CVE-2026-100348 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, grafana, crossplane-provider-family-aws, kubevela, nuclei, crossplane-provider-aws-rds, crossplane-provider-aws-lambda, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...
GHSA-FH4F-47MF-F2GJ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, grafana, crossplane-provider-family-aws, kubevela, nuclei, crossplane-provider-aws-rds, crossplane-provider-aws-lambda, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...
CVE-2026-100347 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-kinesis, grafana, crossplane-provider-family-aws, kubevela, nuclei, crossplane-provider-aws-rds, crossplane-provider-aws-lambda, crossplane-provider-aws-iam, crossplane-provider-aws-firehose,...
EUVD-2026-103172
Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...
CVE-2026-55796
Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...
CVE-2026-55796 Frappe HR: SQL Injection in HRMS Salary Payments via ECS Report
Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...
CVE-2026-55796
Frappe HR, an open-source human resources management solution, contains a SQL Injection vulnerability in the Salary Payments via ECS report component. The flaw exists because the application constructs report conditions using unsafe SQL string interpolation . An authenticated HR user can supply c...
CVE-2026-55796 Frappe HR: SQL Injection in HRMS Salary Payments via ECS Report
Frappe HR is an open-source human resources management solution HRMS. Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The...
Exploit for SQL Injection in Wordpress
🚀 CVE-2026-60137 - WordPress Core Critical SQL Injection SQLi...
CVE-2026-69080
Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...