261263 matches found
Gu3ssWeak
Gu3ssWeak A deliberately vulnerable Android application for mobile security research, bug bounty practice, and CTF-style learning. Contains 21 documented vulnerabilities mapped to the OWASP Mobile Top 10. Quick Start git clone [email protected]:b4sith-sec/Gu3ssWeak.git cd Gu3ssWeak ./gradlew...
CVE-2026-51992
CVE-2026-51992 Within ClickHouse, a feature exists that allows a user with the correct permissions to create dictionaries in order to interact with different databases and run specific queries on them. For PostgreSQL, SELECT queries are wrapped in a COPY QUERY TO STDOUT statement before being...
CVE-2021-42668
cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in the Engineers online portal system. Technical description: An SQL Injection vulnerability exists in the Engineers Online Portal. An attacker can leverage the vulnerable "id" parameter in the "myclassmates.php" web page in order to...
CVE-2025-11077
CVE-2025-11077 - SQL Injection Author: Byte Reaper Description This vulnerability is a Blind SQL Injection in the addcontent.php file of the Online Learning Management System CVE-2025-11077, allowing an attacker to extract database information by sending crafted POST requests. Requirements : Linu...
CVE-2024-51482
CVE-2024-51482 β ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. β€ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...
testenv
Entorno de pruebas de inyecciΓ³n SQL Una colecciΓ³n de pΓ‘ginas web vulnerables a fallos de inyecciΓ³n SQL y mΓ‘s: conf/ - archivos de configuraciΓ³n del sistema operativo utilizados por deployment.sh. dbs/ - bases de datos independientes para algunos sistemas de gestiΓ³n de bases de datos p. ej...
w3af
sqlmap sqlmap es una herramienta para pruebas de penetraciΓ³n "penetration testing" de software libre que automatiza el proceso de detecciΓ³n y explotaciΓ³n de fallos mediante inyecciΓ³n de SQL ademΓ‘s de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detecciΓ³n, asΓ co...
CVE-2025-22964
CVE-2025-22964: Time-based blind SQL injection in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 has a time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows...
CVE-2025-52694-POC
CVE-2025-52694: Advantech SaaS Composer SQL Injection This repository contains Proof-of-Concept PoC tools for CVE-2025-52694 , a critical unauthenticated SQL Injection vulnerability affecting Advantech IoTSuite and IoT Edge Products. Vulnerability Overview Attribute| Details ---|--- CVE ID|...
RootQuest-CTF-Box-Multi-Stage-Exploitation-VM
RootQuest CTF Box β Multi-Stage Exploitation VM π Kalaichelvan Thieveshkar CB013248 Β· Staffordshire University Β· COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...
CVE-2016-6662
CVE-2016-6662 From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN Proof of Concept: https://www.youtube.com/watch?v=lyc7GFE3q2U...
CVE-2026-72550-poc
CVE-2026-72550 β Friendica Unauthenticated SQL Injection Unauthenticated stacked-query SQL injection in the photos endpoint in Friendica allows any visitor to run arbitrary SQL. Field| Value ---|--- CVE ID| CVE-2026-72550 Product| Friendica self-hosted federated social network Affected| =...
CVE-2026-63030-CVE-2026-60137
CVE-2026-63030 & CVE-2026-60137 β wp2shell WordPress Core Pre-Auth RCE β Route Confusion + SQL Injection chained to Remote Code Execution | ---|--- CVE| CVE-2026-63030 + CVE-2026-60137 Alias| wp2shell Vulnerability Type| REST API Route Confusion β SQL Injection β RCE Severity| Critical β CVSS 10....
PT-2026-110054
Name of the Vulnerable Software and Affected Versions Llavero.io versions prior to 0.1.5 Description An issue exists where the software fails to properly sanitize and escape the cill login parameter before incorporating it into a SQL statement. This allows unauthenticated attackers to execute SQL...
PT-2026-110052
Name of the Vulnerable Software and Affected Versions Social Web Suite versions prior to 4.1.13 Description The Social Web Suite WordPress plugin fails to require a shared secret before accepting authorized requests. Additionally, it does not sanitize or escape a parameter used in an SQL statemen...
PT-2026-110351
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...
CVE-2026-81420: Improper Neutralization of Special Elements used in an SQL Command
The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks...
PT-2026-110059
Name of the Vulnerable Software and Affected Versions Datalist it versions prior to 0.0.4 Description The Datalist it WordPress plugin fails to sanitize and escape several request parameters used in the construction of SQL queries. This allows unauthenticated attackers to execute SQL injection...
PT-2026-110062
Name of the Vulnerable Software and Affected Versions WP Verify API versions prior to 1.0.1 Description Unauthenticated users can perform SQL injection attacks because the plugin fails to properly sanitize and escape the verify parameter before incorporating it into a SQL query. SQL injection is ...
PT-2026-110060
Name of the Vulnerable Software and Affected Versions ASPL Product Quotation versions prior to 1.1.1 Description An issue exists where the software fails to sanitize and escape the quote id parameter before incorporating it into SQL statements. This allows unauthenticated attackers to execute SQL...