262186 matches found
CVE-2026-42208-Lab
CVE-2026-42208 — LiteLLM Pre-Auth SQL Injection Timing PoC Local Docker lab and least-harm PoC for CVE-2026-42208, a pre-authentication SQL injection vulnerability in LiteLLM Proxy's API key verification path. This repository demonstrates the difference between a vulnerable LiteLLM instance and a...
CVE-2026-114242
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
CVE-2026-114243
A security flaw exists in the dhikshitha29 Insurance-Management-System within the mysqli_query function of the /Agent/ManagePolicy/EditPolicyHolder.php file. Remote attackers can perform an SQL injection by manipulating the Policy_no/Name arguments. While the project utilizes a rolling release st...
EUVD-2026-107225
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...
CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this vulnerability is the function mysqliquery of the file /Agent/ManagePolicy/EditPolicyHolder.php. Performing a...
CVE-2021-24507
CVE-2021-24507 Astra Pro Addon 3.5.2 - Unauthenticated SQL Injection - CVE-2021-24507...
unknownpwn.github.io
Tecnovision LED Video Wall Vulnerabilities and Exploits. From SQLi to full root access. Introduction: Tecnovision is a manufacturer of LED Video Walls used in arenas For example, Twickenham Stadium, concert halls, shopping malls, as roadsigns and much much more. DlxSpot Player 4 is the software...
CVE-2023-49496_PoC
CVE-2023-49496PoC Description UCServer is an advanced converged communication server. Shanghai Shupin Information Technology Co., Ltd. UCServer has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive database information. POC POST /login/wwxcorpInfo/ HTTP/1...
CVE-2026-114242
A SQL injection vulnerability exists in the dhikshitha29 Insurance-Management-System (commit 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837). The flaw is located in the mysqli_query function within the /Admin/View/editPlan.php file, where a lack of proper saniti...
EUVD-2026-107179
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
CVE-2026-114242 dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqliquery of the file /Admin/View/editPlan.php. Such manipulation of the argument Planno/Name leads to sql...
CVE-2024-12157
CVE-2024-12157 Popup – MailChimp, GetResponse and ActiveCampaign Intergrations = 3.2.6 - Unauthenticated SQL Injection Description The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 + CVE-2026-60137 — WP2Shell Exploit WordPres...
CVE-2026-7028-SQLI
CodeAstro-Online-Job-Portal-SQLi-Delete-All Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: SQL Injection CWE: CWE-89 Affected Endpoint: /admin/jobs-admins/delete-jobs.php Parameter: id GET Impact: Allows deletion of all job records in th...
pythia-sql-clairvoyance
Production-ready SQL injection scanner with 6 detection methods, AI-powered remediation, SARIF output, and CI/CD integration. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · PHP vulnerable shop · 11 findings detected · safe mode · 2265.56s !Pythia — HTML...
CVE-2026-4112
SonicWall SMA 8200v: Privilege Escalation via Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix on 12.5.0-02002 Base SonicWall Advisory 1. Summary A post-authentication blind SQL injection vulnerability in the SonicWall SMA 8200v management console port 8443 allows any...
cve-2026-5147-exp
cve-2026-5147 Exploitation Script For authorized vulnerability validation and lab practice: performs MySQL boolean-based blind injection EXP / INSTR or ASCII and time-based blind injection if + ascii + sleep against SQL injection endpoints, with optional extraction of version, database name,...
CVE-2025-41373
CVE-2025-41373 – SQL Injection in Gandia Integra Total Author: Byte Reaper CVE: CVE-2025-41373 Vulnerability: Authenticated SQL Injection Affected Path: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= Description: This endpoint concatenates the idestudio parameter...
CVE-2023-1454-EXP
CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot Unauthorized SQL injection vulnerability JeecgBoot is a low-code development platform based on a code generator. The latest unauthorized SQL injection in the Java low-code platform jeecg-bootv3.5.0 for enterprise web applications. In addition to exploiti...