pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — Bypass de solo lectura del Asistente de IA de pgAdmin 4 mediante diferencia de lexer PoC para CVE-2026-17351, un bypass crítico CVSS 9.0 de inyección SQL en el Asistente de IA de pgAdmin 4. Resumen de la vulnerabilidad Las versiones de pgAdmin 4 desde la 9.13 hasta la 9.16 utiliz...

CVE-2019-9053

CMS Made Simple Extrae datos carácter por carácter comprobando los retrasos...

CVE-2023-25157

CVE-2023-25157 GeoServer OGC Filter SQL Injection Vulnerabilities...

CVE-2021-26837

CVE-2021-26837 Inyección SQL en HelpSystems / Fortra DeliverNow El parámetro SearchTextbox de la página de búsqueda de registros de DeliverNow /LogGrid.aspx se concatena directamente en una consulta de SQL Server sin parametrización ni validación en el servidor. La aplicación también mostraba al...

CVE-2025-63943

CVE-2025-63943 — Inyección SQL en Grocery Store Management System 1.0 Descripción general Se identificó una vulnerabilidad de Inyección SQL de alta severidad en el componente searchproducts.php de Grocery Store Management System 1.0 , una aplicación web basada en PHP/MySQL creada por anirudhkanna...

CVE-2024-46532

Número de CVE: CVE-2024-46532 proveedor: Shanghai Dingxiang Information Technology Co., Ltd. https://www.kancloud.cn/ producto: Sistema médico de Internet OpenHIS de consulta médica versión: V1.0 componente afectado: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Reproducción de...

Exploit for Interpretation Conflict in Wordpress

LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CV...

CVE-2024-24140

CVE-2024-24140: Daily Habit Tracker App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24140.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24140/blob/main/CVE-2024-24140.md...

CVE-2024-50972

CVE-2024-50972 Description A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...

Bash-exploit-for-CVE-2022-0739

Bash exploit for CVE-2022-0739 Unauthenticated SQL Injection for BookingPress 1.0.11. Usage: ./exploit.sh options Options: -u, --url VALUE Set the URL ex: http://example.com required -e, --event-dir VALUE Set the event directory ex: events -h, --help Display this help message...

CVE-2024-7456scripts

Some simple scripts to help exploit SQLi using both bash and Node.js based on CVE-2024-7456 https://nvd.nist.gov/vuln/detail/CVE-2024-7456...

Magento-eCommerce-RCE-CVE-2015-1397

Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 Overview This script exploits the CVE-2015-1397 vulnerability in Magento, commonly referred to as the Magento Shoplift exploit. It allows an attacker to create a new admin user in the Magento database by injecting SQL payloads. Originally writte...

CVE-2020-15399

Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update :...

CVE-2020-28413_Mantis2.24.3-SQLi-SOAP

Este repositorio no tiene un README...

CVE-2024-57521-RuoYi-SQLi

🛡️ CVE-2024-57521 RuoYi-Vue 认证后 SQL 注入漏洞审计笔记 0. 项目声明 本仓库仅供安全研究与教育目的使用。请勿利用本文档中的技术进行未授权的攻击行为。所有测试均在本地静态代码审计环境下完成。 1. 漏洞概述 CVE编号 ：CVE-2024-57521 影响组件 ：RuoYi-Vue 权限管理系统（ruoyi-generator 模块） 影响版本 ：= v4.7.9 漏洞类型 ：认证后 SQL 注入（布尔盲注 / CWE-89） CVSS评分 ：10.0 Critical 审计方式 ：纯静态代码审计（源码分析） 2. 数据流审计分析 Source →...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-27956-for-fscan

🛑CVE-2024-27956-for-fscan Thanks for PoC by diego-tella English This is a Yaml PoC rule of CVE-2024-27956 Wordpress Automatic SQLi for fscan. How to use: 1. Add the yml file to path:/fscan-main/WebScan/pocs. 2. Build the fscan's go files. 3. Start the fscan and enjoy. Attention: If the...

CVE-2024-24138

CVE-2024-24138: Online Timesheet App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24138.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24138/blob/main/CVE-2024-24138.md...

cve-2021-29442-Nacos-Derby-rce-exp

Introduction Nacos Derby command execution vulnerability exploitation script, by default uses User-Agent bypass to exploit the vulnerability Nacos is an open-source platform for service registration, discovery, and configuration management. In its early versions ≤2.4.0-BETA, Nacos integrates Apac...

CVE-2024-13483

CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 2.2.10 - Unauthenticated SQL Injection Description The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 2.2.10 due to...