DjVul_StringAgg

Django CVE-2020-7471 SQLi CVE-2020-7471: Potential SQL injection via StringAggdelimiter django.contrib.postgres.aggregates.StringAgg aggregation function was subject to SQL injection, using a suitably crafted delimiter. RUN python manage.py makemigrations python manage.py migrate python manage.py...

CveTest

CveTest Test case to replicate Node.JS V0.10.31 v8 backport CVE-2013-6668 crash. Test calls a SQL stored procedure "GetSomething" to retrieve data from a table "Table1" in "SQLDB" database. Crash occurs when there is more than 52 rows returned and after making the same call several times...

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

CVE-2024-32640

CVE-2024-32640 SQL time-based injection PoC...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

django_sqli_target_CVE-2025-64459

This repository does not have a README...

CVE-2024-38793-PoC

CVE-2024-38793-PoC Proof of Concept code for exploitation of CVE-2024-38793 Best Restaurant Menu by PriceListo = 1.4.1 - Authenticated Contributor+ SQL Injection. Proof Of Concept This is a proof of concept exploit for the vulnerability CVE-2024-38793, an SQL injection vulnerability for versions ...

CVE-2023-20110

CVE-2023-20110 Script PoC per CVE-2023-20110 - Vulnerabilità di SQL Injection in Cisco Smart Software Manager On-Prem Utilizzo 1. Aggiorna l'indirizzo IP e i cookie di amministrazione nello script, 2. Esegui lo script con il seguente comando: python3 exploit.py...

-CVE-2012-2661-ActiveRecord-SQL-injection-

-CVE-2012-2661-ActiveRecord-SQL-injection- Write upMalay...

CVE-2025-51458-exp

CVE-2025-51458-exp Inyección SQL Pre-Auth en DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'"...

CVE-2025-61246

CVE-2025-61246 - SQL Injection Vulnerability in Online Shopping System Overview This repository contains a Proof of Concept PoC for CVE-2025-61246 , a critical SQL Injection vulnerability discovered in the Online Shopping System PHP application. The vulnerability allows an unauthenticated attacke...

CVE-2025-14598

CVE-2025-14598 CVSS: 9.8 Remote Unauthenticated SQL Injection leading to Remote Code Execution. Executive Summary A SQL Injection vulnerability was identified in the login functionality of BET e-Portal, a software solution widely deployed across educational institutions for student information an...

CVE-2018-8045

CVE-2018-8045 Joomla core SQL injection vulnerability principle and poc...

CanoP

CanoP CLI A fast, standalone static analysis tool designed specifically to detect vulnerabilities introduced by AI coding assistants. CanoP analyzes your codebase locally to identify security risks in AI-generated code. Features High Signal-to-Noise Ratio : Traditional scanners produce overwhelmi...

Blackash-CVE-2025-12762

🔐 CVE-2025-12762 — Critical RCE Vulnerability in pgAdmin 4 🚨 What’s the Issue? A Remote Code Execution RCE flaw exists in pgAdmin 4 versions ≤ 9.9. Attackers can run arbitrary commands on the host when pgAdmin is running in server mode and processes a PLAIN-format SQL dump during restore. ⚙️...

CVE-2024-58290-Xhibiter-SQLi

CVE-2024-58290-Xhibiter-SQLi Proof of Concept PoC for SQL Injection in Xhibiter NFT Marketplace 1.10.2 Collections Endpoint. Discovered by Sohel Yousef. CVE-2024-58290: Xhibiter NFT Marketplace SQL Injection Exploit Title: Xhibiter NFT Marketplace 1.10.2 - SQL Injection Unauthenticated Date:...

CVE-2026-12260

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

TataShops-cyber-check-attacks

TataShops — Application Security & DAST Laboratory TataShop...

CVE-2024-33911

The School Management 10.3.4 - Post-Authenticated SQL Injection Exploit Title: The School Management 10.3.4 - Post-Authenticated SQL Injection Date: 29 April, 2024 Exploit Author: Ivan Spiridonov xbz0n Vendor Homepage: https://theschool-management.com Version: 10.3.4 Tested on: Ubuntu 22.04 CVE:...

CVE-2025-66947

CVE-2025-66947 Inyección SQL ciega basada en tiempo en krishanmuraiji SMS v1.0 ⏱️ Comparación visual: respuesta normal vs respuesta retardada 6s 🔍 Resumen TL;DR: Un parámetro GET en un módulo administrativo permite inyección SQL basada en tiempo mediante retardos en la respuesta. Existe una...