Other injection.

LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access

• Other injection

<1.3.1 · fixed in 1.3.1

Apache CXF OAuth2 HTTP Response Splitting via WWW-Authenticate Realm Injection

• Other injection

>=4.2.0, <4.2.2 || <4.1.7 · fixed in 4.2.2, 4.1.7

Apache CXF OAuth2 Log Injection via Unsanitized Client Identifier

• Other injection

>=4.2.0, <4.2.2 || <4.1.7 · fixed in 4.2.2, 4.1.7

ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite

• MacWarrior clipbucket-v5
• Other injection
• CWE-155

GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection

• Other injection
• Insecure deserialization

<2.27.0 · fixed in 2.27.0

PenguinMod-BackendApi: NoSQL Injection in Password Reset Endpoint Allows Account Takeover

• PenguinMod-BackendApi
• Other injection
• CWE-20

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

• vim
• Other injection
• Code injection

guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator

• Other injection
• CWE-20

<1.5.4 · fixed in 1.5.4

guzzlehttp/psr7 has CRLF Injection via URI Host Component

• Other injection
• CWE-20

<2.10.2 · fixed in 2.10.2

Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections

• PEVANS Metrics::Any::Adapter::SignalFx
• Other injection
• CWE-150

Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections

• PEVANS Metrics::Any::Adapter::DogStatsd
• Other injection
• CWE-150

Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections

• PEVANS Metrics::Any::Adapter::Statsd
• Other injection
• CWE-150

Log Injection through HTTP Request Paths in Splunk SOAR

• Splunk SOAR
• Other injection

Roxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors)

• roxy-wi
• Path traversal
• Other injection

Roxy-WI: LDAP injection in /user/ldap/<username> (admin-only)

• roxy-wi
• Other injection

HTML injection in the Canarytoken links email

• Thinkst Applied Research Canarytokens
• Other injection

Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

• Other injection

>=5.0.0, <5.0.6 || >=4.5.0, <4.5.12 || >=4.4.0, <=4.4.14 || >=4.0.0, <=4.3.16 || <=3.4.19 · fixed in 5.0.6, 4.5.12

Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference

• Other injection

>=4.0.0, <4.0.6 || >=3.5.0, <3.5.12 || >=3.4.0, <=3.4.14 || >=3.0.0, <=3.3.16 || <=2.4.19 · fixed in 4.0.6, 3.5.12

Frappe LMS: HTML injection in user-controlled metadata

• frappe lms
• Other injection

BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution

• BuddyPress
• Other injection

SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

• Other injection
• CWE-20

>=5.4.46, <5.4.52 || >=6.4.14, <6.4.40 || >=7.1.7, <7.4.12 || >=8.0.0, <8.0.12 · fixed in 5.4.52, 6.4.40, 7.4.12, 8.0.12

Net::IMAP: Command Injection via ID command argument

• Command injection
• Other injection

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

• Command injection
• Other injection

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Microsoft SharePoint Server Spoofing Vulnerability

• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Other injection

Microsoft Teams for Android Information Disclosure Vulnerability

• Microsoft Teams for Android
• Other injection

Injection in Rapid7 Velociraptor

• Rapid7 Velociraptor
• Other injection
• Code injection

Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications

• Other injection

<4.2.4 || >=4.3.0, <4.3.3 · fixed in 4.2.4, 4.3.3

CodeAstro Student Attendance Management System createClassArms.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Student Attendance Management System createClass.php edit sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Student Attendance Management System createClass.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Student Attendance Management System index.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

CodeAstro Payroll System view_account.php sql injection

• CodeAstro Payroll System
• Other injection
• SQL injection

cowboy and gun affected by an HTTP Request/Response Splitting vulnerability

• Other injection

<2.16.0 · fixed in 2.16.0

MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler

• Other injection
• SQL injection

<0.3.0 · fixed in 0.3.0

CodeAstro Payroll System home_salary.php sql injection

• CodeAstro Payroll System
• Other injection
• SQL injection

imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection

• imvks786 student_management_system
• Other injection
• SQL injection

imvks786 student_management_system Login index.ph sql injection

• imvks786 student_management_system
• Other injection
• SQL injection

Multipart form-data header injection in Req via unescaped name/filename/content_type

• Other injection

>=0.5.3, <0.6.0 · fixed in 0.6.0

itsourcecode Hospital Management System addpatient.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System adminaccount.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

Bolt CMS HTML Attribute TextType.php HTML injection

• Bolt CMS
• Other injection
• Cross-site scripting (XSS)

CodeAstro Leave Management System add_leave.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System search_staff_for_updation.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System delete_leave_type.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

CodeAstro Leave Management System search_staff_for_deletion.php sql injection

• CodeAstro Leave Management System
• Other injection
• SQL injection

SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection

• SourceCodester Hospitals Patient Records Management System
• Other injection
• SQL injection

CodeAstro Ingredients Stock Management System add_stock.php sql injection

• CodeAstro Ingredients Stock Management System
• Other injection
• SQL injection

code-projects Online Music Site Search.php sql injection

• code-projects Online Music Site
• Other injection
• SQL injection

code-projects Online Music Site AdminDeleteAlbum.php sql injection

• code-projects Online Music Site
• Other injection
• SQL injection

code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection

• code-projects Simple Flight Ticket Booking System
• Other injection
• SQL injection

Neovim View Branch secure.lua M.read command injection

• Neovim
• Other injection
• Command injection

SourceCodester Class and Exam Timetabling System archive1.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive2.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive3.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive4.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System archive5.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection

• Chengdu Everbrite Network Technology BeikeShop
• Other injection
• SQL injection

Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection

• Kushan2k student-management-system
• Other injection
• SQL injection

jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

• jflyfox jfinal_cms
• Other injection
• SQL injection