blind-sql-bitshifting

Inyección SQL Ciega mediante Desplazamiento de Bits Este es un módulo que realiza inyección SQL ciega utilizando el método de desplazamiento de bits para calcular caracteres en lugar de adivinarlos. Requiere 7/8 solicitudes por carácter, dependiendo de la configuración. Uso import...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...' Backslash Breakout Proof of concept for CVE-2026-17543 CVSS 9.8 Critical, CWE-89, a SQL injection vulnerability in PHP's procedural PostgreSQL extension. Vulnerability Summary pginsert, pgselect, pgupdate, pgdelete, and pgconvert all rout...

whitewidow

Preamble Firstly readthis if you want Whitewidow development to continue. Hello all you whitewidow fans out there I say that with good intentions I promise!. It's me Ekultek, I'm just here to give you a little inside on what's going on with the whitewidow development team and what's happening wit...

SQLiScanner

SQLiScanner Automatic SQL injection with Charles and sqlmapapi 中文版说明文档点这里 Introduction Automatic SQL injection with Charles and sqlmapapi Dependencies Django PostgreSQL Celery sqlmap redis Supported platforms Linux osx Screenshots Installation Preferably, you can download SQLiScanner by cloning t...

sqliv

SQLiv Massive SQL injection scanner Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing so the...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

explo

explo explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo is able to exploit security issues without the need of writing a script. This allows to share complex vulnerabilities in a simple readable and...

Maximo_Sql_Injection-CVE-2019-4650

This repository does not have a README...

CVE-2026-63030

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Batch Route Confusion + CVE-2026-60137 SQL Injection Zero-dependency exploitation toolkit for the wp2shell vulnerability chain in WordPress Core. A single anonymous HTTP request achieves remote code execution on a default WordPress installatio...

AutoSQLi

AutoSQLi, the new way script-kiddies hack websites Features Save System - there is a complete save system, which can resume even when your pc crashed. - technology is cool Dorking - from the command line one dork : YES - from a file: NO - from an interactive wizard: YES Waffing - Thanks to...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Admin+ SQL Injection Description LearnDash Wordpress plugin version below 4.25.6 is vulnerable to Admin+ SQL Injection. Details Type : plugin Slug : sfwd-lms Affected Version : CVSS Score : 9.8 CVSS Rating : Critical CVSS Vector :...

CVE-2023-1454-EXP

JeecgBoot SQL CVE-2023-1454 Exploit 1. Vulnerability Details jeecg-boot version 3.5.0 has an SQL injection vulnerability, which stems from a security issue in the file jmreport/qurestSql, leading to SQL injection via the parameter apiSelectId. 2. Usage python3 CVE-2023-1454.py optional arguments:...

VICIdial - SQL Injection

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database. id: CVE-2024-8503 info: name: VICIdial - SQL Injection author: s4e-io severity: critical description:...

GLPI < 10.0.17 - Pre-Auth SQL Injection

A pre-authentication SQL injection vulnerability exists in the Inventory feature of GLPI. The vulnerability is caused by insufficient sanitization of user input in the handleAgent function when processing XML requests. The issue occurs because SimpleXMLElement objects can bypass the...

ApacheSkywalking

ApacheSkywalking ApacheSKywalking SQLi to Read sensitive file...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Overview CVE-2026-26980 is an unauthenticated SQL Injection vulnerability in TryGhost Ghost CMS Content API. The vulnerable path is...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - SQL Injection Vulnerability in OpenEMR 8.0.0 Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not...

CVE-2025-6783

Inject an always-true condition into the WHERE clause so that every row matches: curl -i -X POST \ -H "Content-Type: application/json" \ -H "forms-id: poc-001' OR '1'='1' -- " \ -H "domain-id: example.com" \ -d ' "emabedtype":"iframe", "shortcodetitle":"INJECTED", "shortcodetag":"xss", "active":0...

EUVD-2026-95334

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...