Optiva-Framework

Optiva-Framework 🕵️ Web Application Scanner 💉 Author : Joker-Security dev-labs ✔️ Description : You can use this Framework on your website to check the security of your website by finding the vulnerability in your website or you can use this tool to Get admin panel search SQL injection by dork As...

SafeLine

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 🏆 Achievements 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and...

CVE-2025-14598

CVE-2025-14598 CVSS: 9.8 Remote Unauthenticated SQL Injection leading to Remote Code Execution. Executive Summary A SQL Injection vulnerability was identified in the login functionality of BET e-Portal, a software solution widely deployed across educational institutions for student information an...

CVE-2026-81815

A flaw was found in Apache OFBiz. A remote, unauthenticated attacker can exploit a Structured Query Language SQL injection vulnerability by submitting a specially crafted search request. This issue occurs because the entity engine improperly sanitizes input values when building database queries o...

CVE-2025-71456

A flaw was found in vtenext. A Structured Query Language SQL injection vulnerability exists in the Fax module due to improper validation of the fieldname parameter. An authenticated remote attacker with low privileges can exploit this flaw by sending a specially crafted request to execute arbitra...

EUVD-2026-117816

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

CVE-2025-71458

FTS3 Web Monitoring (fts-monitoring ) versions 3.12.0 through 3.13.2 and 3.14.0 are vulnerable to an unauthenticated SQL injection in the /linkinfo endpoint. The flaw resides in the get_linkinfo function, where an attacker can inject SQL via the source_se and dest_se query parameters. This allows...

EUVD-2025-211270

FTS3 Web Monitoring fts-monitoring versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by getlinkinfo. Remote attackers can inject SQL through the sourcese and destse query parameters to perform blind injection and rea...

CVE-2026-63774

The Subnet Solutions PowerSYSTEM Center is vulnerable to an SQL Injection (CWE-89) due to insufficient input validation in the report designer . This flaw allows an authenticated user to execute unauthorized SQL commands. The vulnerability carries a CRITICAL severity rating (CVSS 4.0 score of 9.4...

CVE-2025-71458: cern-fts fts-monitoring: FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection…

FTS3 Web Monitoring fts-monitoring versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by getlinkinfo. Remote attackers can inject SQL through the sourcese and destse query parameters to perform blind injection and rea...

CVE-2026-63774: Subnet Solutions: Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute…

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands...

lazyweb

LazyWeb - Vulnerable Web Application LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security...

bbqsql

BBQSQL A Blind SQL Injection Exploitation Tool Table Of Contents What is BBQSQL? Overview of Readme High Level Usage Install BBQSQL Options Query Syntax Overview HTTP Parameters Export Config Import Config Custom Hooks Found a Bug? Can I Help? What's Up with the Name? What is BBQSQL? Blind SQL...

sqlifinder

SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...

CVE-2026-111492

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

CVE-2023-25157

CVE-2023-25157 This is a simple Python Script to Find the Latest GeoServer SQL Injection Vulnerability. You can use the Scripts on hosts to check for infected path. Installation: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh Note: You...

CVE-2026-88985

Prior to version 2.17.0 , Kubeflow Pipelines is vulnerable to an SQL injection vulnerability in its API server. The application trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter when constructing list queries. An attacker capable of invoking an affe...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

SqliSniper

Features • Installation • Usage • Running SqliSniper • Contributing • SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities using...

CVE-2026-111492

The MatchPoint Android app is vulnerable to SQL injection within its push notification handler. The application processes messages from Firebase Cloud Messaging and insecurely constructs database queries by concatenating untrusted data. An attacker capable of interacting with this component can m...