pizzafy 1.0 web app has a published SQL injection exploit
Exploit-DB lists the issue under webapps; no CVE, patch, or confirmed attacks are stated.
Stories per day · 30 days
3 RSS
5 stories, newest first · one card per story
Stories tagged #sqli
[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
Exploit-DB published SQL injection exploits for POMS oretnom23 version 1.0.
CVE-2026-82583, CVE-2026-78224, CVE-2026-82578: NextGen Mirth Connect SQL injection and XXE
CISA advisory ICSMA-26-253-01 covers three NextGen Mirth Connect flaws, including SQL injection and XXE, with testing performed against version 4.5.2.
Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586
Horizon3 disclosed CVE-2026-9586, an unauthenticated SQL injection in Sangoma Switchvox leading to RCE, now under active exploitation in the wild.
2
Inside the Metabase SQLi: Exploited in the Wild
Wiz reverse engineers Metabase SQLi CVE-2026-72898, exploited in the wild, using AI to speed defenses.
3