CVE-2026-121265

SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update. With the arraydatatypes option off, which is the default, insert, update and values treat an arrayref column value as literal SQL. Its first element goes into the SQL text...

CVE-2026-121265 SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update

SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update. With the arraydatatypes option off, which is the default, insert, update and values treat an arrayref column value as literal SQL. Its first element goes into the SQL text...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

CVE-2024-9796

CVE-2024-9796 WordPress WP-Advanced-Search = 5.0.12 time-based blind IF - comment Payload: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5&timestamp=13672261755853'...

LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED Scanner and Exploit Magento The Scanner explores the SQLi Vulnerability 1.9.1.0 CE of Magento. The vulnerability was fixed in Patch SUPEE-5344 , however, the scanner is used to locate and test systems that did not apply the security patch. LetMeFuckIt was written in...

VulnScan

VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

Magento-eCommerce-RCE-CVE-2015-1397

Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 Overview This script exploits the CVE-2015-1397 vulnerability in Magento, commonly referred to as the Magento Shoplift exploit. It allows an attacker to create a new admin user in the Magento database by injecting SQL payloads. Originally writte...

CVE-2024-13479

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 3.2.4 - Unauthenticated SQL Injection Description The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.2.4 due to...

CVE-2024-27956

Wordpress SQLI-2-RCE Exploit This Python script exploits CVE-2024-27956, a vulnerability in Wordpress that allows for SQL Injection leading to Remote Code Execution RCE. Features Multi-threaded Exploitation: Utilizes concurrent threads to exploit multiple Wordpress instances simultaneously. Dynam...

Scanner-and-Patcher

Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

Barcha

🚀 Barcha Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️‍♂️ Liveness & redirect checks ignores bad certs 🔄 Automated Ghauri tests for each host 🛡️ SQLite logging of every scan 🔖 🌟 Features 📡 Shodan Dork :...

CVE-2024-13488

CVE-2024-13488 LTL Freight Quotes – Estes Edition = 3.3.7 - Unauthenticated SQL Injection Description The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.3.7 due to...

CVE-2024-34310

CVE-2024-34310 CVE-2024-34310 Suggested description Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter. Vulnerability Type SQL Injection Vendor of Product https://www.bjjfsd.com/ Affected Product Code Base Jin Fang times...

CVE-2023-5204

CVE-2023-5204 AI ChatBot = 5.0.12 AND time-based blind query SLEEP Payload: action=wpbosearchresponse&name=test&keyword=test&strid=1 AND SELECT 1436 FROM SELECTSLEEP5kZil Type: UNION query Title: Generic UNION que...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

CVE-2026-95870

The wpForo Forum plugin for WordPress (versions

EUVD-2026-119038

The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...