sqlmap-ai

SQLMap AI 助手 一个基于 AI 的 SQLMap 封装工具，让 SQL 注入测试更加简单易用且自动化。 功能特性 核心功能 AI 辅助测试 - 智能漏洞分析与建议 自适应测试 - 逐步测试，并根据目标响应进行自适应调整 增强型 HTML 报告 - 精美、详细的报告，包含漏洞详情 参数定位 - 使用 -p 选项测试特定参数（与原始 SQLMap 类似） WAF 绕过 - 自动选择 tamper 脚本以规避防火墙 数据库枚举 - 完整的数据库、表和列发现 请求文件支持 - 基于 Burp Suite、ZAP 或浏览器抓包进行测试 AI 提供商 Groq - 最快的 AI...

CVE-2019-9053-Exploit-Python-3

CVE-2019-9053 エクスプロイト Python 3 このリポジトリには、CMS Made Simple CMSMS ソフトウェアで発見された脆弱性 CVE-2019-9053 のエクスプロイトが含まれています。このエクスプロイトは Python 3 で動作するように修正されており、CMSMS バージョン 2.2.9 以下と互換性があります。 説明 CVE-2019-9053 は、アプリケーションの応答時間の遅延を監視することでデータベースを列挙し情報を抽出する Time-Based Blind SQLi 脆弱性です。この脆弱性は CMSMS バージョン 2.2.9...

atutor-blind-sqli

ATutor v2.2.1 ブラインドSQLインジェクション CVE-2016-2555を悪用して、基盤となるデータベースの列挙とダンプを行う。 免責事項 この投稿で提供されるすべての情報は、教育目的のみで使用されます。 この情報を悪用して不正アクセスを行ったり、悪意のあるプログラムを作成したりしてはなりません。 著者は、この情報の悪用について一切責任を負いません。...

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 高度な PostgreSQL SQL インジェクション攻撃ツール 🚨 免責事項 認可されたセキュリティテスト専用 不正使用は違法です。所有しているシステム、または明示的なテスト許可を得たシステムでのみ使用してください。 ⚡ クイックスタート インストールと実行 git clone https://github.com/HeavyGhost-le/POCSQLinjectioninParseServerprior6.5.7-7.1.0.git cd POCSQLinjectioninParseServerprior6.5.7-7.1.0 pip insta...

EUVD-2026-83470

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxtegetdatabasetables and dnxtegetdatabasedata AJAX actions. The handlers only conditionally verify a nonce the check runs solely when the 'nonce' POST paramete...

CVE-2026-71241: Missing Authentication for Critical Function

Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...

CVE-2026-10731

SQL injection in the ‘twostepsauthcode’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication 2FA functionality can be accessed without prior authentication, allowing unauthenticated attackers to execute arbitrary SQL queri...

CVE-2026-10731: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the ‘twostepsauthcode’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication 2FA functionality can be accessed without prior authentication, allowing unauthenticated attackers to execute arbitrary SQL queri...

Nemon Trade Energy和Nemon Trade Energy CRM SQL注入漏洞

Nemon Trade Energy and Nemon Trade Energy CRM are both products of the Spanish company Nemon. Nemon Trade Energy is a platform for managing energy retail businesses. Nemon Trade Energy CRM is a platform for managing energy customer relationships. Both Nemon Trade Energy and Nemon Trade Energy CRM...

CVE-2026-5395: Authorization Bypass Through User-Controlled Key

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.0 via the exportEntries function due to missing validation on a user controlled key. This mak...

portswigger-sqlinjection-labs

🔐 SQL Injection Attack Lab – PortSwigger Web Security Academy...

Exploit for Allocation of Resources Without Limits or Throttling in Espressif Esp-Idf

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wr...

CVE-2025-64492

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 8.9.0 and below contain a time-based blind SQL Injection vulnerability. This vulnerability allows an authenticated attacker to infer data from the database by measuring response times,...

CVE-2025-56450

Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...

📄 Log2Space Subscriber Management Software 1.1 SQL Injection

Log2Space Subscriber Management Software version 1.1 suffers from an unauthenticated remote SQL injection vulnerability. Author: Aditya Patil [email protected] Rohan Patil [email protected] CVE-2025-56450 Unauthenticated SQL Injection in Log2Space Subscriber Management Software...

EUVD-2020-3791

Malware in sbrugna...

EUVD-2023-43899

Malicious code in bioql PyPI...

sqlmap-ctt

sqlmap-CTT ========== sqlmap-CTT is an advanced SQL injection t...

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...