CVE-2026-72666: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...

ECTouch SQL注入漏洞

ECTouch is an application. An open source mobile mall system to create an enterprise exclusive mobile mall. ECTouch suffers from a SQL injection vulnerability, which originates from the SQL injection vulnerability in ECTouch v2 generated through the integralmin parameter in index.php. An attacker...

Jifty :: DBI SQL Injection Vulnerability

Jifty :: DBI is an object-relational persistence framework. A SQL injection vulnerability exists in Jifty :: DBI versions prior to 0.68, which can be exploited by an attacker to execute illegal SQL commands...