Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
kylecui NetForensicMCP index.js execAsync command injection
- kylecui NetForensicMCP
- Other injection
- Command injection
- CVSS 7.4 High
Uptrain vulnerable to remote code execution via `/new_run` endpoint
- uptrain
- Other injection
- CVSS 7.4 High
Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
- uptrain
- Other injection
- CVSS 7.4 High
UpTrain vulnerable to Remote code execution at `/create_project`
- uptrain
- Other injection
- CVSS 9.3 CriticalCritical · CVSS 9+
openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Add...
- Other injection
<1.4.0 · fixed in 1.4.0
GHSA-43r4-3hf9-m84q · CVE-2026-74885 - CVSS 5.3 Medium
itsourcecode Hospital Management System viewprescriptionrecord.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting
- Alaev SEO Tools Extension
- Other injection
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
GL.iNet XE3000 Language Update ui.update_langs code injection
- GL.iNet A1300
- GL.iNet AX1800
- Other injection
- Code injection
- CVSS 5.1 Medium
COMFAST CF-N1-S mbox-config sub_44A968 command injection
- COMFAST CF-N1-S
- Other injection
- Command injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System viewpaymentreport.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System viewpatient.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection
- Jij-Inc Jij-MCP-Server
- Other injection
- Code injection
- CVSS 5.3 Medium
Edimax EW-7478APC stainfo command injection
- Edimax EW-7478APC
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7478APC setWAN command injection
- Edimax EW-7478APC
- Other injection
- Command injection
- CVSS 5.3 Medium
Edimax EW-7478APC formWlbasic command injection
- Edimax EW-7478APC
- Other injection
- Command injection
- CVSS 5.3 Medium
iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection
- iatsiuk pptr-mcp
- Other injection
- Code injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System vieworder.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Product Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter
- wcproducttable Product Table & List Builder For WooCommerce
- Other injection
- CVSS 5.3 Medium
DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection
- DefaultFuction Notice-System-Managent
- Other injection
- Code injection
- CVSS 5.3 Medium
Dolibarr User Cloning card.php ldap injection
- Dolibarr
- Other injection
- CVSS 6.9 Medium
Evergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection
- Evergreen
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Stock Management System Master.php delete_supplier sql injection
- SourceCodester Stock Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Online Shopping System checkout_process.php sql injection
- code-projects Online Shopping System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Online Shopping System homeaction.php sql injection
- code-projects Online Shopping System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Online Shopping System action.php sql injection
- code-projects Online Shopping System
- Other injection
- SQL injection
- CVSS 6.9 Medium
code-projects Online Shopping System Login login.php sql injection
- code-projects Online Shopping System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects Online Food Order System delete_food_items1.php sql injection
- code-projects Online Food Order System
- Other injection
- SQL injection
- CVSS 6.9 Medium
Jinher OA attendance_out_approve.aspx sql injection
- Jinher OA
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection
- SourceCodester Class and Exam Timetabling System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System viewmedicine.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 4.8 Medium
Quay: ldap referral filter injection in quay external ldap authentication
- Red Hat OpenShift Update Service
- Red Hat Quay 3
- Other injection
- CVSS 6.3 Medium
Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter
- Other injection
<1.5.21 · fixed in 1.5.21
GHSA-xghw-p77p-3r7x · CVE-2026-53658 - CVSS 6.9 Medium
SourceCodester Simple Client Management System Master.php save_service sql injection
- SourceCodester Simple Client Management System
- Other injection
- SQL injection
- CVSS 5.1 Medium
SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection
- SourceCodester Air Cargo Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection
- francoisjacquet RosarioSIS
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System viewdoctortimings.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection
- Raisecom Communication Command and Dispatch Management Platform
- Other injection
- SQL injection
- CVSS 8.8 High
IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
- IBM Documentation Offline
- Other injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Tenda CH7 ATE Module Kylin HandleCmd command injection
- Tenda CH7
- Tenda CH7G
- Other injection
- Command injection
- CVSS 6.9 Medium
SourceCodester Simple Student Information System view_department.php sql injection
- SourceCodester Simple Student Information System
- Other injection
- SQL injection
- CVSS 6.9 Medium
rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
- rsync
- Other injection
- CVSS 6.9 Medium
Local privilege escalation via improper input sanitization in execl() call
- Teltonika Networks RUTOS
- Teltonika Networks TSWOS
- Other injection
- CVSS 7.2 High
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- IBM Security Verify Access
- IBM Verify Identity Access
- Other injection
- CVSS 4.3 Medium
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- i
- Other injection
- CVSS 6.5 Medium
Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions
- Kirki
- Other injection
- CVSS 6.1 Medium
Velociraptor CSV Formula Injection in Export Pipeline
- Rapid7 Velociraptor
- Other injection
- CVSS 9.6 CriticalCritical · CVSS 9+
TypeBot vulnerable to CSV injection in result export
- baptisteArno typebot.io
- Other injection
- CVSS 4.9 Medium
Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.
- Red Hat Fuse 7
- Red Hat JBoss Enterprise Application Platform 7
- Other injection
- CVSS 7.3 High
Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences
- kovidgoyal kitty
- Command injection
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter
- alseambusher crontab-ui
- Other injection
- CVSS 6.9 Medium
SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection
- SourceCodester Simple Doctors Appointment System
- Other injection
- SQL injection
- CVSS 2.1 Low
Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash
- Other injection
>=1.52.0-rc.11, <3.31.1 · fixed in 3.31.1
GHSA-vvp6-3wv6-833j · CVE-2026-70395 - CVSS 5.3 Medium
itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection
- MingSoft MCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
lock-upme OPMS IN Clause message.go sql injection
- lock-upme OPMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
dresende node-sql-query Request Parameter Select.js SelectQuery.build sql injection
- dresende node-sql-query
- Other injection
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection
- Shenzhen Aitemi M300 Wi-Fi Repeater
- Other injection
- Command injection
- CVSS 5.3 Medium
itsourcecode Hospital Management System viewdoctor.php sql injection
- itsourcecode Hospital Management System
- Other injection
- SQL injection
- CVSS 8.7 High
Tenda CH22 CertListInfo formCertListInfo command injection
- Tenda CH22
- Other injection
- Command injection
- CVSS 6.9 Medium
code-projects Task Management System comment_count_user.php sql injection
- code-projects Task Management System
- Other injection
- SQL injection