Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...

CVE-2024-34220

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vender: SourceCodester AFFECTED AND/OR FIXED VERSION Vulnerable File applyleave.php PROBLEM TYPE Vulnerability Type SQL Injection Impact The attackers can exploit this vulnerability to gain database...

CVE-2023-6654

CVE-2023-6654 PHPEMS Cookie deserialization vulnerability. Exploiting this vulnerability allows modifying SQL statements through deserialization, and through SQL injection, changing the password or permissions of any existing user. The default administrator account is peadmin. Fofa fingerprint...

CVE-2024-50629_50631

CVE-2024-5062950631 Pre-auth RCE N-day exploitation of Synology BeeStation. Detail: https://kiddo-pwn.github.io/blog/2025-11-30/writing-sync-popping-cron https://github.com/user-attachments/assets/8e2ef59c-4f60-4308-8cd4-6d7ce0ba72e1 $ python3 poc.py 192.168.88.248 192.168.88.254 LISTENER listeni...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - SQL Injection Login Bypass Description : Customer Support System is vulnerable 1.0 to SQL Injection. A SQL injection vulnerability in Customer Support System 1.0 enables remote, unauthenticated attackers to bypass the authentication process by exploiti...

drupal-cve-2026-9082-checker

DRUPAL CVE-2026-9082 CHECKER Drupal CVE-2026-9082 Blind SQL Injection Checker Installation git clone https://github.com/N45HT/drupal-cve-2026-9082-checker.git cd drupal-cve-2026-9082-checker pip install -r requirements.txt References https://vulners.com/cve/CVE-2026-9082...

CVE-2023-7172

CVE-2023-7172 Overview This project contains a vulnerable version of a Hospital Management System HMS that is susceptible to SQL Injection CVE-2023-7172. SQL Injection is a critical web application vulnerability that can have severe impacts on the security and functionality of a system. CVE Detai...

POC-CVE-2025-1094

POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...

CVE-2026-119163

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...

CVE-2025-63572

Description A SQL injection vulnerability was discovered in the endpoint responsible for searching for platform clients Zentrajuris v.1.0. User input sent to the search parameter is concatenated directly into a SQL query without proper sanitization/parameterization, allowing the attacker to...

CVE-2025-22652

CVE-2025-22652 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Payment Forms for Paystack Vulnerable version = 4.0.1 Component slug payment-forms-for-paystack Component link https://wordpress.org/plugins/payment-forms-for-paystack/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class...

patch-CVE-2026-03200

Patch: CVE-2026-03200 Vulnerability Details CVE : CVE-2026-03200 Product : Progress MOVEit Description : SQL injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-15 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...

CVE-2024-10355

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview Field| Details ---|-...

CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabase Pre-Auth RCE via SQL injection The script will GET /api/session/properties to get the setup token and assess exploitability of the target. If it's vulnerable will then print the setup token, else it will quit after an error message. ...

CVE-2025-8471

CVE-2025-8471 SQL Injection PoC Author : Byte Reaper CVE : CVE-2025-8471 Vulnerability : SQL Injection in “projectworlds Online Admission System v1.0” Description : A blind SQL injection exists in adminlogin.php?aid=. This PoC sends a series of GET requests with various payloads—both two-stage...

INE-Web-Application-Penetration-Testing-CTF-1

INE – Web Application Penetration Testing CTF 1 Overview...

CVE-2026-119163

The FunnelKit Automations plugin for WordPress & WooCommerce (versions up to and including 3.8.5.2 ) is vulnerable to a time-based SQL Injection via the bwfan_cart_id parameter. The root cause is insufficient escaping of user-supplied parameters and a lack of preparation in existing SQL queries. ...

CVE-2026-119163 FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...

EUVD-2026-114595

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...