Blinder

Blinder Blidner è una piccola libreria Python per automatizzare l'iniezione SQL basata sul tempo utilizzando query predefinite come funzioni per accelerare lo sviluppo di PoC. Installazione Puoi installare Blinder usando il seguente comando: pip install blinder Oppure scaricando il sorgente e...

atutor-blind-sqli

ATutor v2.2.1 SQL Injection Cieca Sfruttamento di CVE-2016-2555 per enumerare e dumpare il database sottostante. Disclaimer Tutte le informazioni fornite in questo post sono solo a scopo educativo. Non si deve fare un uso improprio delle informazioni per ottenere accesso non autorizzato e/o...

CVE-2019-20361-EXPLOIT

CVE-2019-20361-EXPLOIT Es gab einen Fehler im WordPress-Plugin Email Subscribers & Newsletters vor Version 4.3.1, der es ermöglichte, SQL-Anweisungen über den Hash-Parameter an die Datenbank zu übergeben eine blinde SQL-Injection-Schwachstelle. Dieses Skript ist eine „bereinigte Version“ des...

CVE-2023-6063-PoC

PoC per CVE-2023-6063: WP Fastest Cache 1.2.2 Iniezione SQL Cieca Non Autenticata -red Una Proof of Concept per CVE-2023-6063, una vulnerabilità di iniezione SQL cieca basata sul tempo in WP Fastest Cache ≤1.2.2. Estrae password hashate userpass ed email useremail dalla tabella wpusers abusando d...

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit Questo repository contiene uno strumento proof-of-concept basato su Go per testare uno scenario di vulnerabilità noto di Control Web Panel CWP correlato a CVE-2026-57517. L'implementazione prende di mira un percorso di SQL injection cieca e include la distribuzione...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia for WordPress, BuddyPress and bbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869...

CVE-2025-8471

CVE-2025-8471 SQL Injection PoC Autor : Byte Reaper CVE : CVE-2025-8471 Schwachstelle : SQL Injection in „projectworlds Online Admission System v1.0“ Beschreibung : In adminlogin.php?aid= existiert eine blinde SQL-Injection. Dieser PoC sendet eine Reihe von GET-Anfragen mit verschiedenen Payloads...

CVE-2019-9053-exploit

CVE-2019-9053 — SQL Injection non autenticata in CMS Made Simple Descrizione CVE-2019-9053 è una vulnerabilità di iniezione SQL time-based blind che colpisce CMS Made Simple nelle versioni ≤ 2.2.9. Non richiede autenticazione. Il parametro vulnerabile è m1idlist nel modulo News moduleinterface.ph...

CVE-2024-34472

CVE-2024-34472 विवरण: एक प्रमाणित उपयोगकर्ता mliRealtimeEmails.php फ़ाइल में मौजूद ब्लाइंड SQL इंजेक्शन भेद्यता का दुरुपयोग कर सकता है। /mailinspector/mliRealtimeEmails.php पर POST अनुरोध में ordemGrid पैरामीटर इनपुट को ठीक से सैनिटाइज़ नहीं करता है, जिससे एक प्रमाणित हमलावर मनमाने SQL कमांड...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Autor: Byte Reaper Beschreibung Diese Schwachstelle ist eine Blind-SQL-Injection in der Datei addcontent.php des Online Learning Management Systems CVE-2025-11077, die es einem Angreifer ermöglicht, Datenbankinformationen durch das Senden präparierter POST-Anfragen ...

SqliSniper

Funktionen • Installation • Verwendung • SqliSniper ausführen • Mitwirken • SqliSniper ist ein robustes Python-Tool zur Erkennung von zeitbasierten Blind-SQL-Injection-Angriffen in HTTP-Request-Headern. Es beschleunigt den Sicherheitsbewertungsprozess durch schnelles Scannen und Identifizieren...

CVE-2022-31296

CVE-2022-31296 Sito di forum di discussione online 1.0 - Blind SQL Injection Titolo Exploit: Sito di forum di discussione online 1.0 - Blind SQL Injection Data: 2022-06-13 CVE: CVE-2022-31296 Autore Exploit: Abdulaziz Saad @b4zb0z Homepage del fornitore: https://www.sourcecodester.com/ Link del...

Blisqy

1. Blisqy Blisqy ist ein Werkzeug, das Web-Sicherheitsforscher dabei unterstützt, zeitbasierte Blind SQL Injection in HTTP-Headern zu finden und dieselbe Schwachstelle auszunutzen. Die Ausnutzung ermöglicht langsames Absaugen von Daten aus einer Datenbank unterstützt derzeit nur MySQL/MariaDB...

CVE-2019-13292-WebERP_4.15

Blind SQL Injection Exploit for WebERP यह Python3 स्क्रिप्ट है जो WebERP संस्करण 4.15 में Blind SQL Injection कमज़ोरी vulnerability का शोषण करने का प्रदर्शन करती है, जिसे मूलतः 10 जून 2019 को Semen Alexandrovich Lyhin द्वारा खोजा गया था। मूल शोषण exploit यहाँ पाया जा सकता है, और WebERP सिस्टम के...

cve-2019-9053-py3

CVE-2019-9053 — Exploração SQLi no CMS Made Simple Python 3 Aviso: Esta ferramenta destina-se apenas a testes de penetração autorizados e fins educacionais. Executá-la contra sistemas sem permissão explícita por escrito é ilegal. O autor não assume nenhuma responsabilidade por uso indevido. Visão...

andor

andor Blind SQL Injection Tool with Golang Usage Download andor.go and go to the folder where the file andor.go located. And type this to command prompt: go run andor.go --url "http://deneme.com/index.php?id=1" Note: Get parameter value must be correct, otherwise it will not work...

glpi-logbleed

glpi-logbleed Iniezione SQL cieca nel filtro dei log di cronologia di GLPI. CVE-2026-53629, corretta in 11.0.8 e 10.0.26, presente fin dalla 9.4.0. Richiede un account qualsiasi con il diritto di lettura logs. Il profilo Read-Only predefinito lo include. Advisory: GHSA-cpcj-x335-5cmh Resoconto:...