hackingtoolkit

All in One Hacking toolKit For Hackers, Penetration Tester and CyberSecurity 🥇 Install Kali Linux in WIndows10 Without VirtualBox YOUTUBE Update Available 3.0 ✔ Installation Bug Fixed Added New Tools 200 + Additional Tools Updating Everyday Added Tool in wifijamming Added Tool in steganography Pu...

Telaeris XPressEntry Unauthenticated SQL Injection RCE — Detect

Fingerprint / reachability check for Telaeris XPressEntry Unauthenticated SQL Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Telaeris XPressEntry Unauthenticated SQL Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Countersoft Gemini Authenticated SQL Injection to xp_cmdshell RCE — Detect

Fingerprint / reachability check for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE

Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE """Delta DIAEnergie IEMS — Authenticated CommandTag SQL Injection → VBScript → RCE""" from future import annotations from kittysploit import import os, sys, socket, hashlib, base64, time import time import re import...

Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xp_cmdshell — Detect

Fingerprint / reachability check for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE""" from kittysploit...

Countersoft Gemini SQL injection xp_cmdshell RCE

After /account/login, stacked SQL in GetCustomFieldValue term enables xpcmdshell Windows, blind marker file. !/usr/bin/env python3 -- coding: utf-8 -- """Countersoft Gemini authenticated SQLi to xpcmdshell RCE.""" from future import annotations import re from urllib.parse import urlencode from...

Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE — Detect

Fingerprint / reachability check for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lansweeper LicenseActions Second-Order SQL Injection Authenticated RCE""" from kittysploit import from lib.protocols.http.httpclie...

Plixer Scrutinizer adminEditLang ORDER BY SQL Injection Authenticated RCE — Detect

Fingerprint / reachability check for Plixer Scrutinizer adminEditLang ORDER BY SQL Injection Authenticated RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Plixer Scrutinizer adminEditLang ORDER BY SQL Injection Authenticated RCE""" from kittysploit import from...

Leostream Connection Broker — Authenticated SQL Injection → lo_export Webshell → — Detect

Fingerprint / reachability check for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Leostream Connection Broker — Authenticated SQL Injection → loexport Webshell → sudo Root RCE""" from...

Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

Summary A SQL Injection vulnerability exists in the Third Party Company update functionality of Dolibarr ERP/CRM. The localtax1value parameter lt1 is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or...

GHSA-V5FQ-CF5M-VWV7 Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

Summary A SQL Injection vulnerability exists in the Third Party Company update functionality of Dolibarr ERP/CRM. The localtax1value parameter lt1 is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or...

cvebench-evidence

BountyKai on CVE-Bench — results & evidence 21 of 40 real-w...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

EUVD-2026-110823

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

CVE-2026-65151

The NVIDIA NeMo Agent Toolkit is affected by a SQL injection vulnerability (CWE-89). An attacker could exploit this flaw to cause data tampering , denial of service , and information disclosure . The vulnerability has a CVSS 3.1 base score of 8.4 (High) with a local attack vector. No specific exp...

WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

SQL Injection vulnerability discovered by anhdung1329 in WordPress Plugin Motors versions = 1.4.126...

WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by AndrewN in WordPress Plugin BuddyPress versions = 14.5.2...

CVE-2026-102788

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts. When the parameter does not match known sorting keys, it ...