CVE-2024-43468

Microsoft Configuration Manager ConfigMgr / SCCM 2403 Unauthenticated SQL injections CVE-2024-43468 exploit This script exploits the CVE-2024-43468 that allows an unauthenticated attacker, with network access to a Management Point, to execute arbitrary SQL queries on the site database. As queries...

phpipam_1.4.4

CVE-2022-23046 phpIPAM 1.4.4 - SQL Injection phpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the subnet parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php. This project currently prints out database information and host version...

Collabfiltrator

Collabfiltrator Exfiltre la ejecución remota de código ciego Blind RCE y la salida de inyección SQL a través de DNS usando Burp Collaborator. Versión: 4.0.1 Autores: Adam Logue Jared McLaren Frank Scarpella Ryan Griffin Autores IA: Claude 3.5 Sonnet ChatGPT 4o Requisitos: Burp Suite Professional...

CVE-2022-24707

PoC for CVE-2022-24707 SQL Injection Vulnerability on Puncher plugin. A POST request can be crafted to exploit SQL Injection and leak database contents. This is tested on Anuko Time Tracker 1.20.0.5640. root@kitploit: python3 exploit.py --help usage: exploit.py -h --username USERNAME --password...

College-Management-System-course_code-SQL-Injection-Authenticated

College Management System - Inyección SQL 'coursecode' Autenticado 1. Descripción: College Management System 1.0 permite inyección SQL a través del parámetro 'coursecode' en /College-Management-System/admin/asign-single-student-subjects.php. La explotación de este problema podría permitir a un...

CVE-2021-40353

CVE-2021-40353 CVE-2021-40353 openSIS 8.0 SQL Injection Vulnerability https://vulners.com/cve/CVE-2021-40353 A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the USERNAME...

CVE-2026-86595

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655...

CVE-2026-73640

Dayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare GET request with one of the parameters filled in with an arbitrary SQL query. The parameter is interpreted as part of SQL predicate resulting in Time-Based...

lighty-sqlinj-demo

title: Ep4 - Vulnerabilidad Relacionada con Redes members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Vulnerabilidad relacionada: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirmación:...

FreePBX-Vulns-December-25

Vulnerabilidades de FreePBX - Diciembre de 2025 Este repositorio contiene plantillas de Nuclei para detectar tres vulnerabilidades críticas en FreePBX: CVE-2025-61675 : Inyección SQL autenticada CVSS 8.6 - Afecta al módulo endpoint CVE-2025-61678 : Subida autenticada de archivos arbitrarios CVSS...

CVE-2022-0739

CVE-2022-0739 Python PoC Exploit for CVE-2022-0739 Features Database Metadata Lookup Wordpress User Credential Dump Arbitrary Blind Query Injection 💉 Usage root@kitploit: usage: cve-2022-0739 -h -u URL -e EXEC options: -h, --help show this help message and exit -u URL, --url URL URL of the page...

NeutrinoBotHack

NeutrinoBotHack Inyección SQL ciega en el panel Neutrino...

Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - Inyección SQL en 'search'...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

CVE-2020-24913-PoC

CVE-2020-24913-PoC A Poc for CVE-2020-24913, a SQL injection vulnerability in qcubed all versions including 3.1.1 in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request. This PoC is performed using a MyS...

CVE-2023-3047

Telegram : @ghostmans3c or @Chrome2024 Donate BTC : 17L22i227Keet23QCNaeCyrQ6xfiTQpQJ5 PoC How To Exploit CVE-2023-3047 Description Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection.This issue affects Lockcell:...

CVE-2022-28171-POC

CVE-2022-28171-POC Originalmente publiqué esto en ExploitDB, que puedes encontrar en https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Múltiples ejecuciones remotas de código Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...

CVE-2026-60137-WordPress-Core-SQL-Injection-PoC

CVE-2026-60137 — PoC de inyección SQL en el núcleo de WordPress Prueba de concepto no destructiva y banco de verificación para CVE-2026-60137 , una inyección SQL ciega en el núcleo de WordPress WPQuery::authornotin, accesible a través del parámetro authorexclude de la API REST. Causa raíz...

CVE-2026-63030-WP2Shell

CVE-2026-63030 | WP2Shell Explotado por gr1tx WP2Shell es una Prueba de Concepto PoC basada en Python para CVE-2026-63030. Realiza la verificación de vulnerabilidad basada en tiempo contra la API Batch de WordPress y genera informes detallados en HTML y JSON. El proyecto está destinado a...