251778 matches found
CVE-2019-9053
CMS Made Simple 通过检查响应延迟逐字符 提取数据。 提取内容： 盐值（cmssiteprefs 表） 管理员用户名（cmsusers 表） 管理员邮箱（cmsusers 表） 管理员密码哈希（cmsusers 表） 可选：使用提供的字典文件和盐值尝试破解提取的哈希。 注意事项 ✅ 完全兼容 Python 3（在 TryHackMe/HTB 工作流中稳定）。 ✅ 可在虚拟环境（venv）中干净地运行。 ✅ 使用彩色输出清晰跟踪进度。 免责声明 本利用脚本仅供教育目的 使用。请勿在未拥有或未获明确授权的系统上使用。 致谢 原始 Python 2 利用脚本：Daniele...
CVE-2023-25157
CVE-2023-25157 GeoServer OGC Filter SQL Injection Vulnerabilities...
CVE-2021-26837
CVE-2021-26837 Inyección SQL en HelpSystems / Fortra DeliverNow El parámetro SearchTextbox de la página de búsqueda de registros de DeliverNow /LogGrid.aspx se concatena directamente en una consulta de SQL Server sin parametrización ni validación en el servidor. La aplicación también mostraba al...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for education...
CVE-2025-63943
CVE-2025-63943 — Inyección SQL en Grocery Store Management System 1.0 Descripción general Se identificó una vulnerabilidad de Inyección SQL de alta severidad en el componente searchproducts.php de Grocery Store Management System 1.0 , una aplicación web basada en PHP/MySQL creada por anirudhkanna...
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP BASE Booking versions = 6.4.0...
CVE-2024-46532
CVE number: CVE-2024-46532 vendor: 上海顶想信息科技有限公司https://www.kancloud.cn/ product: 互联网医疗系统医疗门诊OpenHIS version: V1.0 affected component: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Reproduction of SQL Injection Vulnerabilities in OpenHIS Vulnerabilities：...
WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin Taskbuilder versions = 6.0.5...
CVE-2024-24140
CVE-2024-24140: Daily Habit Tracker App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24140.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24140/blob/main/CVE-2024-24140.md...
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP BASE Booking versions = 6.4.0...
CVE-2026-101110
CVE-2026-101110 — OrdaSoft Book Library Free inyección SQL no autenticada PoC en Python 3 para CVE-2026-101110 — OrdaSoft Book Library Free para Joomla ≤ 6.4.6. Actualice a 6.4.7+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101110 Catálogo| https://pocbit.org/pocs/ Componente|...
CVE-2026-101108
CVE-2026-101108 — OrdaSoft Vehicle Manager Free inyección SQL no autenticada PoC en Python 3 para CVE-2026-101108 — extensión Joomla OrdaSoft Vehicle Manager Free ≤ 6.5.7. Corregido en 6.5.8+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101108 Catálogo| https://pocbit.org/pocs/ Componente|...
CVE-2026-100752
CVE-2026-100752 — Inyección SQL no autenticada en OrdaSoft Real Estate Manager Free PoC en Python 3 para CVE-2026-100752 — extensión Joomla OrdaSoft Real Estate Manager Free ≤ 6.7.8. Corregido en 6.7.9+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-100752 Catálogo| https://pocbit.org/pocs/...
CVE-2024-50972
CVE-2024-50972 Description A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...
Bash-exploit-for-CVE-2022-0739
CVE-2022-0739 的 Bash 利用脚本 用于 BookingPress 1.0.11 的未认证 SQL 注入。 Usage: ./exploit.sh options Options: -u, --url VALUE Set the URL ex: http://example.com required -e, --event-dir VALUE Set the event directory ex: events -h, --help Display this help message...
CVE-2024-7456scripts
Some simple scripts to help exploit SQLi using both bash and Node.js based on CVE-2024-7456 https://nvd.nist.gov/vuln/detail/CVE-2024-7456...
Magento-eCommerce-RCE-CVE-2015-1397
Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 Overview This script exploits the CVE-2015-1397 vulnerability in Magento, commonly referred to as the Magento Shoplift exploit. It allows an attacker to create a new admin user in the Magento database by injecting SQL payloads. Originally writte...
CVE-2020-15399
Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Inyección SQL autenticada Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update :...
Joomblah
Joomblah 针对Joomla 3.7.0的漏洞利用工具 CVE-2017-8917 漏洞解释： https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html 代码修改 第46行修改 ... result += value.decode'utf-8' ... 使用方法 将joomblah.py脚本指向存在漏洞的Joomla 3.7.0安装目录，可能需要一些时间，但会导出用户和会话表。 $ python joomblah.py http://127.0.0.1:8080 .---. .-'''-...