CVE-2026-29861

CVE-2026-29861 🛡️ CVE Disclosure: CVE-2026-29861 — SQL Injection in PHP-MYSQL-User-Login-System Disclosure Date: 10 April 2026 CVE ID: CVE-2026-29861 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in PHP-MYSQL-User-Login-System v1.0, specifically within the...

Joomblah

Joomblah Exploit for Joomla 3.7.0 CVE-2017-8917 Explanation about the vulnerability: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html Code modification Modification in line 46 ... result += value.decode'utf-8' ... Usage Point the joomblah.py script at the vulnerable...

Gu3ssWeak

Gu3ssWeak A deliberately vulnerable Android application for mobile security research, bug bounty practice, and CTF-style learning. Contains 21 documented vulnerabilities mapped to the OWASP Mobile Top 10. Quick Start git clone [email protected]:b4sith-sec/Gu3ssWeak.git cd Gu3ssWeak ./gradlew...

CVE-2026-44680-MikroORM-SQL-Injection-Exploit-Framework

CVE-2026-44680 - MikroORM SQL Injection Exploit Framework Professional Proof-of-Concept Tool for Security Researchers 🔍 Overview CVE-2026-44680 is a critical SQL injection vulnerability affecting MikroORM, a popular TypeScript ORM for Node.js. This exploit framework provides security researchers...

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

CVE-2024-42327

Write-up CVE-2024-42327 Zabbix Vulnerability Target: 10.129.231.176 Information: I know my target is a Zabbix server. I received a default user account to log into Zabbix: user matthew passwd 96qzn0h2e1k3. This account is a default user, without additional groups or privileges. As usual, we start...

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227 CVE-2024-25227 Exploit CVE-2024-25227 is a ABO.CMS 5.8 SQLi vulnerability found in the parameter "tblogin" PoC: POST /login.aspx HTTP/1.1 Host: localhost Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 Unauthenticated SQL Injection PoC -blue Unauthenticated attackers can inject arbitrary SQL into the ORDER BY clause via the sort parameter of the Geo Mashup render-map endpoint, enabling time-based blind extraction of sensitive database information. Table of...

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview Code-Projects...

CVE-2026-31844

Koha CVE-2026-31844: Authenticated SQL Injection Overview This repository contains a responsible vulnerability POC for CVE-2026-31844 , a high severity authenticated SQL injection vulnerability in the Koha Library Management System. The vulnerability exists in the GetDistinctValues function in...

CVE-2026-9082

Drupal CVE-2026-9082 Scanner Semi-passive scanner that detects Drupal installations potentially vulnerable to CVE-2026-9082 PostgreSQL SQL injection. No SQL payloads sent. No state-changing requests. Vulnerable Versions Branch| Affected| Fixed ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x|...

CVE-2026-77635

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77635 Write-up: https://abraxaslabs.tech/research/CVE-2026-77635 CVE-2026-77635 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-77635-Abraxas-Labs.py. JSONVALUE is not bound...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple For educational purposes and authorized security testing only...

CVE-2021-31856

Vulnerability Report CVE-2021-31856: a sql injection in Meshery item| details| note ---|---|--- project| https://github.com/layer5io/meshery| date announced| 2021-04-28| CVE-ID| CVE-2021-31856| https://vulners.com/cve/CVE-2021-31856 EDB-ID| | Vulnerable Version| v0.5.2| \ Patched Version| v0.5.3|...

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-and-CVE-2023-24204 Introduction In the ever-evolving landscape of cybersecurity, web applications remain a prime target for attackers seeking to exploit vulnerabilities. Recently, two critical vulnerabilities were discovered in the SourceCodester Simple Customer Relationship...

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 SQL Injection in online-shopping-system The online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection attacks. The proId parameter on the /action.php page does not sanitize the user input, an attacker can extract...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

CVE-2019-9053

CVE-2019-9053 Improved code of Daniele Scanu SQL Injection exploit Following changes applied: Added time control variable -t or --time that enables user to extend the timing of SQL injection useful if a network connection in between hosts is subject of delays with packet transmission Network...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 English Description This lightweight WordPress plugin serves as a temporary virtual patch mitigation against the critical...