CVE-2021-40353

CVE-2021-40353 CVE-2021-40353 openSIS 8.0 SQL Injection Vulnerability https://vulners.com/cve/CVE-2021-40353 A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the USERNAME...

CVE-2026-86595

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655...

CVE-2026-73640

Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the parameters filled in with an arbitrary SQL query. The parameter is interpreted as part of SQL predicate resulting in Time-Based...

lighty-sqlinj-demo

title: Ep4 - Network-Related Vulnerability members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Related vulnerability: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirm:...

FreePBX-Vulns-December-25

FreePBX Vulnerabilities - December 2025 This repository contains Nuclei templates for detecting three critical vulnerabilities in FreePBX: CVE-2025-61675 : Authenticated SQL Injection CVSS 8.6 - Affects endpoint module CVE-2025-61678 : Authenticated Arbitrary File Upload CVSS 8.6 - Affects endpoi...

CVE-2022-0739

CVE-2022-0739 Python PoC Exploit for CVE-2022-0739 Features Database Metadata Lookup Wordpress User Credential Dump Arbitrary Blind Query Injection 💉 Usage root@kitploit: usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help message and exit -u URL, --url URL URL of the page...

NeutrinoBotHack

NeutrinoBotHack Blind SQL injection in Neutrino panel...

Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

CVE-2020-24913-PoC

CVE-2020-24913-PoC A Poc for CVE-2020-24913, a SQL injection vulnerability in qcubed all versions including 3.1.1 in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request. This PoC is performed using a MyS...

CVE-2023-3047

Telegram : @ghostmans3c or @Chrome2024 Donate BTC : 17L22i227Keet23QCNaeCyrQ6xfiTQpQJ5 PoC How To Exploit CVE-2023-3047 Description Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection.This issue affects Lockcell:...

CVE-2022-28171-POC

CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution root@kitploit: Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...

CVE-2026-60137-WordPress-Core-SQL-Injection-PoC

CVE-2026-60137 — WordPress Core SQL Injection PoC Non-destructive proof-of-concept and verification harness for CVE-2026-60137 , a blind SQL injection in WordPress core WPQuery::authornotin, reachable via the REST API's authorexclude parameter. Root Cause WPQuery::getposts builds SQL by...

CVE-2026-63030-WP2Shell

CVE-2026-63030 | WP2Shell xpl0ited by gr1tx WP2Shell is a Python-based Proof-of-Concept PoC for CVE-2026-63030. It performs time-based vulnerability verification against the WordPress Batch API and generates detailed HTML and JSON reports. The project is intended for authorized security...

WP2Shell

WP2Shell - CVE-2026-63030 / CVE-2026-60137 WordPress REST API Batch SQL Injection to RCE Full discovery and exploitation tool for WordPress REST API Batch endpoint vulnerability. This tool exploits a critical SQL injection vulnerability in the WordPress REST API /wp-json/batch/v1 endpoint, allowi...

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 SQL Injection in online-shopping-system The online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection attacks. The proId parameter on the /action.php page does not sanitize the user input, an attacker can extract...

NginxHunter

NginxHunter Descripción NginxHunter es una herramienta integral diseñada para analizar los registros de acceso de Nginx en busca de vulnerabilidades de seguridad y actividades sospechosas. Detecta intentos de inyección SQL, herramientas de escaneo, accesos a rutas sensibles, intentos de...

r3con

R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...

CVE-2023-49548

CVE-2023-49548 Customer Support System 1.0 - SQL Injection Vulnerability in the "lastname" Parameter During "saveuser" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...