CVE-2026-86232

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

lazyweb

LazyWeb - Vulnerable Web Application LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security...

EUVD-2026-72170

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been publish...

EUVD-2026-72171

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqliquery of the file /admin/modaladdcourse2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

EUVD-2026-72173

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-72172

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

ScanQLi

ScanQLi ScanQLi is a simple SQL injection scanner with somes additionals features. This tool can't exploit the SQLi, it just detect them. Tested on Debian 9 Features Classic Blind Time based GBK soon Recursive scan follow all hrefs of the scanned web site Cookies integration Adjustable wait delay...

Jeeves

Jeeves Usage • Installation Jeeves is made for looking to Time-Based Blind SQLInjection through recon. Contents: Installation Usage Adding Headers Using Proxy Making Post Request Multiple ways of usage - Installation & Requirements: Installing Jeeves 💀 root@kitploit: $ go install...

CVE-2026-86225

SourceCodester Class and Exam Timetabling System 1.0 contains a remote SQL injection in the mysqli_query function within /admin/modal_add_room.php, triggered by the unsanitized room_name argument. No authentication or user interaction is required. Impact on confidentiality, integrity, and availab...

CVE-2026-86224

A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 affects the mysqli_query function in /admin/modal_add_product.php , where manipulation of the fname argument allows a remote, unauthenticated attacker to inject SQL. The impact is rated HIGH (7.3) under CVSS 3.1...

webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

webpwn3r

webpwn3r यह प्रोजेक्ट वर्षों से अनुरक्षित नहीं है, और इसे तब लिखा गया था जब मैंने Python सीखना शुरू किया था, लेकिन फिर भी लोग इसे पसंद करते हैं :D. यह केवल python2.7 का समर्थन करता है। WebPwn3r - वेब अनुप्रयोग सुरक्षा स्कैनर। द्वारा: Ebrahim Hegazy - @Zigoo0 धन्यवाद: @lnxg33k, @dia2diab @Aelhemil...

lighty-sqlinj-demo

title: Ep4 - नेटवर्क से संबंधित भेद्यता members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 संबंधित भेद्यताएँ: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. पुष्टि करें:...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - बिना प्रमाणीकरण SQL इंजेक्शन विवरण WordPress के लिए Fancy Product Designer प्लगइन, संस्करण 6.4.3 तक 6.4.3 सहित SQL इंजेक्शन के लिए संवेदनशील है, क्योंकि उपयोगकर्ता द्वारा आपूर्ति किए गए पैरामीटर पर अपर्याप्त एस्केपिंग और मौजूदा SQL क्वेरी पर पर्याप्...

CVE-2019-1698

TRAN CONG DANH - SVTT - मेंटर: LUU VAN LAN - CVE-2019-1698 - प्रारंभ दिन: 30/07/2024 भेद्यता वाले संस्करण और भेद्यता के फिक्स वाले कोड संस्करण के बीच diff कोड देखें: कोड संदर्भ 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php कोड संदर्भ ...

CVE-2023-6063-PoC

CVE-2023-6063 PoC संदर्भ WP Fastest Cache 1.2.2 में संबोधित अप्रमाणित SQL इंजेक्शन भेद्यता | WPScan प्लगइन सेटिंग "WP Fastest Cache" सक्षम करें। PoC "wordpressloggedin" कुकी पैरामीटर असुरक्षित है। root@kitploit: $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php"...

CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE सारांश: यह दस्तावेज़ दर्शाता है कि FreePBX 16 में दो कमज़ोरियों CVE-2025-57819 और CVE-2025-61678 को संयोजित करके बिना प्रमाणीकरण के एक्सेस से रिमोट कोड एक्ज़ीक्यूशन Remote Code Execution, RCE तक की पूर्ण आक्रमण श्रृंखला कैसे प्राप्त की जाती है। CVE...

CVE-2019-14529

CVE-2019-14529 OpenEMR प्रोजेक्ट में एकाधिक SQL इंजेक्शन कमजोरियाँ कमजोर फ़ंक्शन फ़ाइल में: /openemr/interface/forms/eyemag/save.php शर्तें : कोई भी अधिकृत उपयोगकर्ता कमजोर संस्करण: 5.0.2, 5.0.2 संस्करण में ठीक किया गया। विवरण दो फ़ंक्शन हैं: 1. "storePDF", अनफ़िल्टर्ड चर "encounter" के साथ, 2...

CVE-2026-86223

A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0 , specifically in the mysqli_query function within the file /admin/modal_add_coursea.php . Manipulating the course argument allows remote exploitation without authentication. The exploit has been made pub...