EUVD-2025-60927

The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...

EUVD-2013-7242

Malware in sbrugna...

EUVD-2007-5940

Malware in sbrugna...

EUVD-2022-4913

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2013-7484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix before 5.0 represents passwords in the users table with unsalted MD5. CVE-2013-7484 Note that Nessus relies on the presence of the package as reported by...

Exploit for CVE-2024-51482

CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 po...

Sql injection

TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database including the users table. This issue...

PT-2023-28894 · Unknown · Taxonworks

Name of the Vulnerable Software and Affected Versions: TaxonWorks versions prior to 0.34.0 Description: A SQL injection issue was found in TaxonWorks, allowing authenticated attackers to extract arbitrary data from the database, including the users table, which may lead to information disclosure...

SQL Injection in forkcms/forkcms

Description When an authenticated user exports translations, the user calls an URL like this: http://forkcms.site/private/de/locale/export?token=5z0ao1nk4p&type%5B0%5D=lbl&language%5B0%5D=de The parameter type0 and language0 are both vulnerable for SQL injection. Proof of Concept PoC for paramete...

Code injection

Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...

ThemeGrill Demo Importer < 1.6.3 - Auth Bypass & Database Wipe

There is a vulnerability that allows any unauthenticated user to wipe the entire database to its default state after which they are automatically logged in as an administrator. Edit WPScanTeam: v1.6.2 was released with an insufficient fix, allowing attackers to still exploit the issue using a CSR...

DEBIAN-CVE-2013-7484

Zabbix before 5.0 represents passwords in the users table with unsalted MD5...

E-Xoopport 3.1 - eCal display.php (katid) SQL Injection Exploit

No description provided by source. ? / Vis Intelligendi http.//vis-intelligendi.co.cc E-Xooport 3.1 SQL Injection Exploit 01 Mq on/off doesn't matter bug details and explanation on http://vis-intelligendi.co.cc search e-xooport E-Xoops is a xoops-based cms. Many modules are bugged, in this case...

Easy Online Shop SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/...

Pardal CMS <= 0.2.0 - Blind SQL Injection Exploit

No description provided by source. --+++=============================================================+++-- --+++====== Pardal CMS = 0.2.0 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- ?php function usage echo \nPardal CMS = 0.2.0...

Passwordless login

Users are able to log themselves in with a blank password, even for users who are NOT currently in the users table ie have never previously logged in...

PBW CMS SQL Injection

---------------IN THE NAME OF ALLAH----------------- Title: PBW CMS SQL Injection Vulnerability Discovered By : Ashiyane Digital Security Team Author : Ashiyane Digital Security Team Dork : intext:Powered by Point B Web CMS inurl:eventdetail.php?eventid= Exploit :...

YABSoft Advanced Image Hosting Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable...

Joomla Soft SQL Injection

Application Name : Joomla comsoft Type : SQL Injection author : Sktevahshat Google Dork : index.php?option=comsoft E-mail: [email protected] http://www.sthst.com/index.php?option=comsoft&cid=3 heloo new bug in joomla -------------------------------------------------- ", "+", "%"; $id =...

HUGE-inc Portal SQL Injection

+Title : HUGE Sql Injection vulnerability +Vender : http://www.hugeinc.com +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 05/07/2011 +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com Err0r 0n : index.php Exploit : http://target.com/index.php?ID=SQL...