google-dorks-bug-bounty

Google Dorks for Bug Bounty A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting Live Tool Broad domain search w/ negative search site:example.com -www -shop -share -ir -mfa PHP extension w/ parameters site:example.com ext:php inurl:? API Endpoints site:example.com...

CVE-2019-9053-Fixed

The user assumes all responsibility for any action taken using this tool. If these terms are not acceptable to you, please do not use this tool. Use it only in environments where you are permitted to perform pentesting activities Bug fixes for the CVE-2019-9053 exploit Some bug fixes for the...

sobelow

Sobelow Sobelow is a security-focused static analysis tool for Elixir & the Phoenix framework. For security researchers, it is a useful tool for getting a quick view of points-of-interest. For project maintainers, it can be used to prevent the introduction of a number of common vulnerabilities...

CVE-2024-8522

CVE-2024-8522 LearnPress – WordPress LMS Plugin execute class-lp-course-db.php:564, LPCourseDB-getcourses Courses.php:241, LearnPress\Models\Courses::getcourses class-lp-rest-courses-v1-controller.php:502, LPJwtCoursesV1Controller-getcourses class-wp-rest-server.php:1230,...

CVE-2025-70149-SQL-Injection

CVE-2025-70149 — SQL Injection Research Project Overview Security research project demonstrating exploitation and mitigation of CVE-2025-70149, a critical SQL Injection vulnerability CVSS 9.8/10 in CodeAstro Membership Management System v1.0. CVE Details Field| Value ---|--- CVE ID| CVE-2025-7014...

CVE-2023-45657

CVE-2023-45657 Nexter = 2.0.3 - Authenticated Subscriber+ SQL Injection via 'to' and 'from' Description: The Nexter theme for WordPress is vulnerable to SQL Injection via the 'to' and 'from' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied...

CVE-2024-34327

CVE-2024-34327 SQL Injection Vulnerability Checker This script V-24-02-001SQLiCheck.py is a proof-of-concept PoC tool to verify the presence of a time-based blind SQL injection vulnerability affecting the password-reset-token.php endpoint, identified as CVE-2024-34327. ⚠️ Disclaimer This tool is...

wifiphisher

About Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be...

CVE-2022-37208

37208 CVE-2022-37208 Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

sqlifinder

SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...

CVE-2026-121265

SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update. With the arraydatatypes option off, which is the default, insert, update and values treat an arrayref column value as literal SQL. Its first element goes into the SQL text...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple 2.2.10 - SQL Injection Found by Daniele Scanu. Can be found Here Fixes the problem: "File "/home/user/CVE-2019-9053", line 25 print "+ Specify an url target" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ SyntaxError: Missing parentheses in call to 'print'. Did you mean print...?...

CVE-2026-103914

The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin is vulnerable to SQL Injection in versions up to and including 1.3 . The flaw exists in the ae_preview_post() AJAX handler and its preview_post_filter() callback due to insufficient escaping of the user-supplied q par...

EUVD-2026-119145

The Dynific Addons for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'q' parameter in versions up to, and including, 1.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the aepreviewpost...

CVE-2026-116751

The Amelia Pro plugin for WordPress (versions up to and including 9.9.1 ) is vulnerable to an unauthenticated time-based SQL Injection . The flaw exists because the plugin fails to sufficiently escape the 'tag[]' parameter array keys , which are not handled by WordPress's wp_magic_quotes. These u...

EUVD-2026-119142

The Booking for Appointments and Events Calendar – Amelia Pro plugin for WordPress is vulnerable to time-based SQL Injection via the 'tag array KEYS' parameter in all versions up to, and including, 9.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparatio...

EUVD-2026-119141

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Account Takeover in all versions up to, and including, 5.7.6. This is due to the OsModel::buildconditionsquery function in lib/models/model.php comparin...

CVE-2026-118066

The LatePoint | Calendar & Scheduling for WordPress plugin is vulnerable to an Authentication Bypass via account takeover in versions up to and including 5.7.6 . The root cause is located in the OsModel::build_conditions_query() function in lib/models/model.php, which incorrectly concatenates SQL...

CVE-2026-121265

The SQL::Abstract Perl module (versions before 2.000003 ) is vulnerable to SQL injection due to improper handling of arrayref column values. When the array_datatypes option is off (the default), the insert(), update(), and values() functions treat an arrayref as literal SQL, placing the first ele...

EUVD-2026-119134

SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update. With the arraydatatypes option off, which is the default, insert, update and values treat an arrayref column value as literal SQL. Its first element goes into the SQL text...