CoBRA

CoBRA Co efficient-B ased R econstruction of A rithmetic — a Mixed Boolean-Arithmetic expression simplifier. CoBRA deobfuscates expressions that interleave arithmetic +, -, with bitwise &, |, ^, and shift operators — a technique commonly used in software obfuscation. $ cobra-cli --mba "x&y+x|y" x...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

CVE-2026-89012

CVE-2026-89012 — Dolibarr SQL Filter Denylist Bypass Exploit for CVE-2026-89012: the forbidden-fields denylist in forgeSQLFromUniversalSearchCriteria introduced with the CVE-2026-71510 fix uses a case-sensitive inarray while the operand charset allows A-Z. Since SQL column resolution is...

CVE-2026-79303

CVE-2026-79303 Boolean-blind SQL injection Description : Dynamic SQL statements are generated without the required data validation and without using parameterized statements or stored procedures. Impact : SQLi CVSSv3.1 vector : AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 9.9 Critical CWE : CWE-89: Improp...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2026-28576-poc

CVE-2026-28576: SQL Injection in the Android Contacts Provider One picked contact, every contact: a targetSdk compat gate turns a single-contact picker grant into a full contacts database dump. Android 17 hardened the Contacts Provider against SQL injection with setStrictColumns / setStrictGramma...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

CVE-2025-65354

CVE-2025-65354 — SQL Injection Vulnerability Summary An SQL Injection vulnerability exists in the PuneethReddyHC event-management application version 1.0 due to improper input handling. Vulnerability Type SQL Injection Affected Component Endpoint: /Grocery/searchproductsitname.php Parameter:...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

CVE-2022-42098

KLiK-SocialMediaWebsite version v1.0.1 Vulnerability Explanation: KLiK-SocialMediaWebsite v1.0.1 has SQL Injection Vulnerabilities on profile.php at parameter id. Attack Vectors: KLiK-SocialMediaWebsite v1.0.1 Once an user has been created it can also be find people on KLiK through the KLiK Users...

CVE-2026-27886-PoC-Account-Takeover

CVE-2026-27886 Automated Exploit - Usage Guide What This Script Does Automates the full account takeover chain in 4 HTTP request groups: 1. Vulnerability Verification - Confirms the target is vulnerable 2. Email Enumeration - Extracts admin email via boolean oracle 500 requests 3. Password Reset...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

CVE-2026-44706

SQL Injection in Chatwoot FilterService A proof-of-concept exploit for CVE-2026-44706, a SQL Injection vulnerability in Chatwoot's FilterServiceltgtfiltervalues that allows any authenticated agent to read the entire PostgreSQL database including user credentials and API tokens. Read the full...

CVE-2026-37149

CVE-2026-37149 SQL Injection in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Overview CVE ID: CVE-2026-37149 Vulnerability Type: SQL Injection CWE-89 Severity: High Discoverer: Dhyey Patel Description GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Overview CVE-2026-26980 is an unauthenticated SQL Injection vulnerability in TryGhost Ghost CMS Content API. The vulnerable path is...

CVE-2024-51482

CVE-2024-51482 - ZoneMinder Blind SQL Injection Table of Contents Overview Vulnerability Details Technical Analysis Exploitation Guide Installation Usage Examples Mitigation References Overview CVE-2024-51482 is a critical boolean-based SQL Injection vulnerability discovered in ZoneMinder, a...

BSQLinjector

BSQLinjector BSQLinjector uses blind method to retrieve data from SQL databases. I recommend using "--test" switch to clearly see how configured payload looks like before sending it to an application. Options: --file Mandatory - File containing valid HTTP request and SQL injection point SQLINJECT...

CVE-2024-51482

CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 poc.py By default, this script enumerates the zm database, pulls from the Users table, and dumps Username+Password columns. If these 4 things exist, you will receive a username and password hash. More detailed information on the...