CVE-2024-21513

CVE-2024-21513 PoC for CVE-2024-21513 Original exploit documented by Snyk Security Research Exploit CVE-2024-21513 is a vulnerability in langchain-experimental where unvalidated SQL query results were passed to Python's eval, enabling remote code execution through SQL-based input injection. PoC...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE via SQL Injection SQL injection vulnerability in BigAnt Messenger causes RCE vulnerability. Follow the steps to exploit. Usage: root@kitploit: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit -r,...

CVE-2024-9264

CVE-2024-9264 Grafana Post-Auth DuckDB SQL Injection RCE, File Read Proof of Concept PoC This PoC demonstrates the exploitation of CVE-2024-9264 using an authenticated user to perform a DuckDB SQL query and read an arbitrary file on the filesystem or execute arbitrary code remotely. Arbitrary cod...

CVE-2022-0169

CVE-2022-0169 — WordPress Photo Gallery SQLi PoC This is a simple Python proof-of-concept PoC for CVE-2022-0169 , an SQL injection vulnerability in the WordPress Photo Gallery plugin. What it does Checks the WordPress version if available Exploits the vulnerable admin-ajax.php endpoint Dumps...

SqliSniper

Características • Instalación • Uso • Ejecutar SqliSniper • Contribuir • SqliSniper es una herramienta robusta en Python diseñada para detectar inyecciones SQL ciegas basadas en tiempo en cabeceras de solicitudes HTTP. Mejora el proceso de evaluación de seguridad al escanear rápidamente e...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL Injection Exploit mTLS client certs from MacOS keychain version Go implementation of CVE-2024-43468 exploit that uses macOS Keychain for mTLS authentication without need to export keys from keychain. Additionally: Added proxy support to not use problematic proxychains. Add...

gogs

gogs Here we will be setting up our lab in our SEED Ubuntu 16.04 VM and we need to install the Go Git Service GOGS on our VM first before we can move on to exploiting the SQL injection vulnerability. To setup the VM, here are the steps: Step 1: Install the Database Once we have logged in to the...

Pybelt

NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...

CVE-2023-30092

CVE-2023-30092 Alle Details zu CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service: Tru...

tbhm

The Bug Hunter's Methodology TBHM Welcome! This repo is a collection of tips tricks tools data analysis and notes related to web application security assessments and more specifically towards bug hunting in bug bounties. The current sections are divided as follows: Before You Get Hacking Learning...

CVE-2025-7461

CVE-2025-7461: SQL-Injection-Schwachstellenanalyse im Modern Bag E-Commerce-System 🌐 Sprache / 语言 : Deutsch | 简体中文 Schwachstellenübersicht Schwachstellendatenbank: https://vuldb.com/?id.316112 Projektquelle: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/...

cve-2021-29442-Nacos-Derby-rce-exp

Einführung Exploit-Skript für die Nacos-Derby-Befehlsausführungsschwachstelle. Standardmäßig wird der User-Agent-Bypass verwendet, um die Schwachstelle auszunutzen. Nacos ist eine Open-Source-Plattform für Dienstregistrierung, -ermittlung und Konfigurationsverwaltung. In früheren Versionen...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 – SQL-Injection in PHP ext/pgsql per E'...'-Backslash-Ausbruch Proof-of-Concept für CVE-2026-17543 CVSS 9.8 Critical, CWE-89, eine SQL-Injection-Schwachstelle in der prozeduralen PostgreSQL-Erweiterung von PHP. Zusammenfassung der Schwachstelle pginsert, pgselect, pgupdate, pgdelet...

CVE-2026-26980-PoC

CVE-2026-26980 — Blind-SQL-Injection in der Ghost-CMS-Content-API Betroffen: Ghost 3.24.0 – 6.19.0 Behoben in: Ghost 6.19.1 Authentifizierung erforderlich: Keine — der Content-API-Schlüssel ist öffentlich Auswirkung: Unauthentifiziertes Lesen der gesamten Datenbank Anmeldedaten, API-Schlüssel...

CVE-2026-6433

CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS, JS & PHP · Nicht authentifizierte SQL-Injection → RCE über eval Betroffen: FlipperCode Custom CSS, JS & PHP ≤ 2.0.7 · WordPress-Plugin-Angriffsfläche über admin-ajax.php Auf einen Blick...

CVE-2023-25157-and-CVE-2023-25158

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 This repository contains a detailed description and replication steps of the SQL Injection vulnerabilities found in the GeoServer platform and GeoTools Library. The vulnerability has been assigned the identifier CVE-2023-25157 for...

CVE-2016-2386

CVE-2016-2386 SAP NetWeaver AS JAVA UDDI Component SQL Injection root@kitploit: POST /UDDISecurityService/UDDISecurityImplBean HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78....

CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Pre-Auth SQL Injection Found by msd0pe https://github.com/waqaskanju/Chitor-CMS Project by waqaskanju chitor1.1.py Patched since 69d3442 commit 2023/04/13 SQL Injection was found in the /editschool.php?id= endpoint and doesn't need any authentication. chitor1.0.p...

CVE-2021-35042

CVE-2021-35042 SQL injection via QuerySet.orderby untrusted input Setup: Start the instances using: docker-compose up Now open the following URL to load sample data: http://localhost:8000/vulapp/setup Then go to the vulnerable page at: http://localhost:8000/vulapp/ Exploit the parameter at:...