CMS-made-simple-sqli-python3

CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQL Injection riscritto per python3, CVE-2019-9053 Ho trovato problematico eseguire questo exploit su Kali Linux, poiché python2 non ha termcolor, quindi con poche modifiche l'ho fatto funzionare con python3. Tutto il merito va a:...

CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Injeção SQL Pré-Autenticação Descoberto por msd0pe https://github.com/waqaskanju/Chitor-CMS Projeto por waqaskanju chitor1.1.py Corrigido desde o commit 69d3442 2023/04/13 Injeção SQL foi encontrada no endpoint /editschool.php?id= e não requer nenhuma autenticaçã...

Django-faille-CVE-2025-57833_test

Test der SQL-Injection-Schwachstelle über Alias in Django Definition: Was ist ein Alias? Ein Alias ist ein Name, der einer Spalte oder einem Aggregationsergebnis in einer SQL-Abfrage gegeben wird. In Django werden Aliase mit den Methoden annotate oder alias verwendet, um berechnete Felder zu...

CVE-2022-RCE

CVE-2022-XXXX Iniezione inversa di dati spazzatura Abbonamento CVE Strumento exploit Tutorial Exploit POC RCE LOG4j Deserializzazione JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559...

CVE-2025-65950

CVE-2025-65950: WBCE CMS ist anfällig für zeitbasierte Blind-SQL-Injection über den groups-Parameter Übersicht c. Erfassen Sie die POST-Anfrage, die an /wbce/admin/users/save.php gesendet wird, wenn die Schaltfläche „Speichern“ angeklickt wird...

bordair-multimodal

Dataset di Iniezione di Prompt Multimodale 516.588 campioni etichettati 251.782 attacco + 251.576 benigni, più una suddivisione di validazione reale di 13.230 campioni in cinque versioni del dataset più l'ingestione di dataset esterni, coprendo attacchi cross-modali, multi-turn, suffisso...

laravel-threat-detection

Laravel Threat Detection Rilevamento passivo delle intrusioni per Laravel — osserva ogni injection SQL, XSS, scanner e sonda bot che colpisce la tua app, registrata con pieno contesto. È un IDS, non un WAF: non blocca, filtra o modifica mai una richiesta. Aggiungilo a qualsiasi app Laravel 10–13 ...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Schneller Netzwerkscanner für CVE-2025-64459 Django SQL-Injection-Schwachstelle. Installation root@kitploit: pip install -r requirements.txt Verwendung root@kitploit: Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t...

Research_Successful_Errors

Successful Errors: Neue Code Injection- und SSTI-Techniken !NOTE Dies ist die zweite Version des Whitepapers auf Basis der Ergebnisse, die ich vor der Veröffentlichung von SSTImap Version 1.3.1 vorgestellt habe. Weitere Verbesserungen werden zu einem späteren Zeitpunkt als Version 1.2 der Forschu...

RTI-Toolkit

RTI-Toolkit Remote Template Injection Toolkit Descrizione RTI-Toolkit è un toolkit PowerShell open-source per l'attacco di Remote Template Injection. Questo toolkit include uno script PowerShell chiamato PS-Templator.ps1 che può essere utilizzato sia da un punto di vista offensivo che difensivo. ...

CVE-2025-59536

CVE-2025-59536 - a implementação do diálogo de confiança de inicialização. Vulnerabilidade do Claude Gravidade: ALTA CVSS: 8.8 Impacto: Confidencialidade, Integridade, Disponibilidade Publicado: 2025-10-03 Legal Apenas para testes de segurança autorizados. Causa Raiz versão curta Claude Code é um...

CVE-2026-77586 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

EUVD-2026-67780

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

CVE-2026-77586

In MongoDB Connector for BI , object names (collections, fields, indexes) are embedded into the DDL output of SHOW CREATE statements without escaping the identifier delimiter. A user with write access to a sampled collection can craft a name that closes the quoted identifier early, injecting arbi...

CVE-2025-69215

CVE-2025-69215: OpenSTAManager presenta una SQL Injection nel modulo Stampe Panoramica...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 एक्सप्लॉइट ⚠️ अस्वीकरण - केवल शैक्षणिक उपयोग यह एक्सप्लॉइट केवल अधिकृत पैठ परीक्षण penetration testing और शैक्षणिक उद्देश्यों के लिए है। कंप्यूटर सिस्टम तक अनधिकृत पहुंच अवैध है। लेखक किसी भी दुरुपयोग के लिए जिम्मेदार नहीं है। 📋 अवलोकन CVE-2021-22911 Rocket.Chat में एक...

EUVD-2026-67779

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

CVE-2026-77184

MongoDB Connector for BI is affected by an incomplete escaping flaw: the description text of a collection's JSON schema validator is incorporated into the comment text of DDL returned by SHOW CREATE statements without fully escaping backslash characters. An attacker with permission to modify a co...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc Proof of concept di SQL injection blind basata sul tempo non autenticata per l'endpoint VERMAJAXfunctions.php di VICIdial CVE-2024-8503. Il progetto è destinato esclusivamente a test di sicurezza autorizzati, validazione e formazione. Panoramica CVE-2024-8503...