CVE-2026-41462

🚨 CVE-2026-41462 - ProjeQtor 未认证 SQL 注入 ProjeQtor ≤ 12.4.3 中的严重未认证 SQL 注入 📌 概述 CVE-2026-41462 是 ProjeQtor 项目管理工具登录功能中的一个严重未认证 SQL 注入漏洞。 CVE ID ：CVE-2026-41462 影响版本 ：ProjeQtor 7.0 至 12.4.3 已修复版本 ：12.4.4 严重性 ：严重（CVSS 9.8） 类型 ：未认证堆叠式 SQL 注入 🛠️ 利用方式 使用方法 python3 CVE-2026-41462.py -u http://target.com...

CVE-2026-82526 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

CVE-2026-82526 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

PT-2026-85209

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

CVE-2021-30486

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp GET computerID, AssetManagementChart.jsp POST group1, AssetManagementList.jsp GET computerID or group1, or AssetManagementSummary.jsp GET group1...

SolarWinds Orion Service - SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...