CVE-2023-24775-and-CVE-2023-24780

CVE-2023-24775-and-CVE-2023-24780 my python poc 2023-24780 and CVE-2023-24775 this sqli cve funadmin This is a repository with a poc exploit for python cve sqli funadmin. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 Vulnerable version of Funadmin v3.2.0 Vulnerability via id...

CVE-2025-25964

CVE-2025-25964: SQL Injection in School Information Management System v1.0 Introduction In today's digital landscape, SQL Injection SQLi remains one of the most common and dangerous vulnerabilities found in web applications. This blog post discusses a critical SQL Injection vulnerability...

CVE-2024-1071-PoC-Script

CVE-2024-1071 Exploit Script 🚀 🌟 Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

slowql

SlowQL The fastest offline SQL static analyzer. Built in Rust for zero false positives. Catch SQL injection, performance regressions, missing indexes, unbounded queries, compliance violations, and 282+ more issues before they reach production. No database connection required. What SlowQL Does...

CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 About SecureWithUmer/Exploit-Index is the world's premier, zero-API aggregat...

CVE-2026-42647-Lab

CVE-2026-42647 - JoomSport Unauthenticated Time-Based Blind SQL Injection via sortf Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-42647, an unauthenticated SQL injection vulnerability affecting the WordPress plugin JoomSport - for Sports: Te...

CVE-2026-108776 Apache Kylin: tables/names SparkSQL injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

CVE-2026-108776

A SQL Injection vulnerability exists in Apache Kylin affecting versions 4.0.0 through 5.0.4 . The flaw is caused by the improper neutralization of special elements used in an SQL command within the tables/names SparkSQL component. The impact is considered moderate when the Kylin service is operat...

EUVD-2026-104145

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

CVE-2026-13695

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

CVE-2018-17254

CVE-2018-17254 Exploit Title: Joomla JCK Editor 6.4.4 - 'parent' SQL Injection Googke Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ Vendor Homepage: http://docs.arkextensions.com/downloads/jck-editor Version: 6.4.4 Tested on: Debian 10 Ubuntu Windows 11/10 CVE : CVE-2018-17254 PHP...

CVE-2020-7471

CVE-2020-7471 This repository provides the environment and POC for CVE-2020-7471 Potential SQL injection via StringAggdelimiter vulnerability. Affected Django versions 1.11 to 1.11.28 exclusive 2.2 to 2.2.10 exclusive 3.0 to 3.0.3 exclusive The following steps are required before downloading and...

CVE-2023-47460

CVE-2023-47460 Description SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component Vulnerability Type SQL Injection Vendor of Product Knovos Discovery Affected Product...

woo

Woocommerce 3.3 to 5.5 - Unauthenticated SQL Injection https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 Exploit woocommerce SQLI and grab user and password hash Commands usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h, --help show this help message and...

CVE-2025-7461

CVE-2025-7461: SQL Injection Vulnerability Analysis in Modern Bag E-commerce System 🌐 Language / 语言 : English | 简体中文 Vulnerability Overview Vulnerability Database: https://vuldb.com/?id.316112 Project Source: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/ Item...

CVE-2025-55885

CVE-2025-55885 Description SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Ligne before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php Attack Vectors SQL injection via unsanitized GET parameter ocid on...

CVE-2024-42327

PoC and Exploit for CVE-2024-42327 / ZBX-25623 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being calle...