CVE ID :CVE-2025-71434 Published : Oct. 22, 2026, 11:17 a.m. | 50 minutes ago Description :Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endpoint via the elementmore parameter with srcType=2. Attackers...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71434 - Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/list

VERWANDTEARTIKEL

CVE-2026-115330 - Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics

CVE-2026-115331 - Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters

CVE-2026-115332 - Lotus through 0.10.2 SQL Injection via Subscription Filter Keys

CVE-2026-115333 - Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

CVE-2026-115324 - mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

CVE-2026-115325 - Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup