250252 matches found
CVE-2021-43609-POC
Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle install Stage 1...
CVE-2024-50629_50631
CVE-2024-5062950631 Pre-auth RCE N-day exploitation of Synology BeeStation. Detail: https://kiddo-pwn.github.io/blog/2025-11-30/writing-sync-popping-cron https://github.com/user-attachments/assets/8e2ef59c-4f60-4308-8cd4-6d7ce0ba72e1 $ python3 poc.py 192.168.88.248 192.168.88.254 LISTENER listeni...
NginxHunter
NginxHunter Description NginxHunter is a comprehensive tool designed to analyze Nginx access logs for security vulnerabilities and suspicious activities. It detects SQL injection attempts, scanner tools, sensitive path accesses, exploitation attempts, webshells, and more. Ideal for system...
CVE-2025-14124
CVE-2025-14124 WordPress Team Plugin - Unauthenticated SQL Injection Author: Hyun Chiya Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-14124 Plugin| WordPress Team Plugin Affected Versions| esclike $this-s's' ; // ⚠️ esclike only escapes %, , \ $where .= "OR $wpdb-posts.posttitle...
Hack-Tool
All in One Hacking tool For Hackers🥇 Install Kali Linux in WIndows10 Without VirtualBox YOUTUBE or use Docker Update Available V1.1.0 🚀 Added New Tools Reverse Engineering RAT Tools Web Crawling Payload Injector Multitor Tools update Added Tool in wifijamming Added Tool in steganography Hackingto...
cve-2026-3359-exp
CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42. In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv name of your enviroment here" or "venv...
CVE-2023-4542
poc The D-LINK-DAR-8000-10 Online behavior audit gateway has rce vulnerabilities official website:http://www.dlink.com.cn/ version:D-LINK DAR-8000-10 See the login page. Construct url:...
CVE-2024-42327
PoC for CVE-2024-42327 / ZBX-25623 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the...
CVE-2024-24401
Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK DESIGNED TO BE RUN ON KALI LINUX Notes Nagios has patched version 2024R1.0.1 in all recent downloads. To determine if a target is vulnerable, ensure they are using an older download of 2024R1.0.1. The updated script checks to make sure that...
CVE-2022-24124
POC for CVE-2022-24124 Exploit Code for CVE-2022-24124 aka Casdoor SQL Injection Exploit Links: ExploitDB-50792 PacketStormSecurity Expected outcome: Dump SQL database version on host running Casdoor 1.13.1 Intended only for educational and testing in corporate environments. Exploit Usage...
CVE-2023-50070
CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...
CVE-2023-1454
CVE-2023-1454 jmreport/qurestSql Unauthorized SQL Injection Batch Scan POC Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Description Original tool URL The original tool h...
nginx_log_check
nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...
CVE-2023-38891
CVE-2023-38891 Authenticated SQL Injection Vulnerability in VTiger Open Source CRM v7.5 Discovered by: Jacob Elliott 07/13/23 Summary In the Reports module in VTiger CRM v7.5.0, there is insufficient checking of the selected fields for the report which are stored and then later reintroduced as a...
CVE-2022-30511
CVE-2022-30511 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30511 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...
Joomla3.7-SQLi-CVE-2017-8917
Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...
sqlipy
sqlipy SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. SQLMap comes with a RESTful based server that will execute SQLMap scans. This plugin can start the API for you or connect to an already running API to perform a scan. Requirements Jython 2.7 up to 2.7.2 D...
Blinder
Blinder Blidner is a small python library to automate time-based blind SQL injection by using a pre defined queries as a functions to automate a rapid PoC development. Installation You can install Blinder using the following command: pip install blinder Or by downloading the source and importing ...
libinjection
libinjection SQL / SQLI tokenizer parser analyzer. For C and C++ PHP Python Lua Java external port LuaJIT/FFI https://github.com/p0pr0ck5/lua-ffi-libinjection external port See https://www.client9.com/ for details and presentations. Simple example: include include include include "libinjection.h"...
