CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root PoC de cadena completa para CVE-2025-57819. La inyección SQL basada en errores no autenticada en el módulo endpoint de FreePBX encadena hasta una shell root mediante la inyección de trabajos cron y la escalada de privilegios por incron. Solo para pruebas...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Unauthenticated SQL Injection Description The Fancy Product Designer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search autocompletion plugin in WordPress, allowing SQL injection through unsanitized GET parameters. 📌 Description This vulnerability allows an attacker to inject arbitrary SQL...

CVE-2026-63030

CVE-2026-63030 Inyección SQL por confusión de rutas en el procesamiento por lotes de la API REST de WordPress CVE-2026-63030 — Prueba de concepto Investigación, desarrollo de exploits y documentación porCh4120N ⚠️ Aviso legal Este repositorio y la herramienta adjunta exploit.py están destinados...

CVE-2019-9053-port-py3

Exploit CVE-2019-9053 - Python 3 Este es un port a Python 3 del exploit CVE-2019-9053, que afecta a versiones de CMS Made Simple CMSMS anteriores a la 2.2.10. La vulnerabilidad permite inyección SQL a través del módulo News. Salida de ejemplo Probado en el TryHackMe Simple CTF Challenge...

CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46014-Vulnerabilidad-de-Inyección-SQL-en-Blood-Bank-1.0-de-Code-Projects Autor del Exploit: ersinerenler Página del Proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del Software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2026-101018

A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function groupalledit of the file dayrui/App/Member/Controllers/Admin/Home.php of the component Group Editing. This manipulation of the argument groupid causes sql injection. The attack is possible to be carrie...

CVE-2026-42647-Lab

CVE-2026-42647 - JoomSport Unauthenticated Time-Based Blind SQL Injection via sortf Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-42647, an unauthenticated SQL injection vulnerability affecting the WordPress plugin JoomSport - for Sports: Te...

CVE-2026-101018

The dayrui XunruiCMS software, version up to 4.7.2 , contains a SQL injection vulnerability within the Group Editing component. The flaw exists in the group_all_edit function of the file dayrui/App/Member/Controllers/Admin/Home.php , where insufficient sanitization of the groupid argument allows ...

EUVD-2026-88203

A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function groupalledit of the file dayrui/App/Member/Controllers/Admin/Home.php of the component Group Editing. This manipulation of the argument groupid causes sql injection. The attack is possible to be carrie...

CVE-2020-0618_DETECTION

CVE-2020-0618 - PoC de Detección de RCE en Microsoft SQL Server Reporting Services SSRS 📜 Descripción Este es un PoC sencillo para detectar CVE-2020-0618 , una vulnerabilidad de ejecución remota de código que afecta a Microsoft SQL Server Reporting Services SSRS. La vulnerabilidad existe debido a...

CVE-2018-17254

CVE-2018-17254 漏洞标题：Joomla JCK Editor 6.4.4 - 'parent' SQL注入 Google Dork：inurl:/plugins/editors/jckeditor/plugins/jtreelink/ 供应商主页：http://docs.arkextensions.com/downloads/jck-editor 版本：6.4.4 测试环境：Debian 10 Ubuntu Windows 11/10 CVE编号：CVE-2018-17254 PHP版本（漏洞利用）：7.3.27...

CVE-2024-10355

Código fuente Descarga gratuita del software de gestión de bombas de gasolina | SourceCodester Descripción Vulnerabilidad de inyección SQL en sourcecodester Petrol pump management software v1.0. Se ha encontrado una vulnerabilidad clasificada como de alto riesgo, que afecta a una funcionalidad...

CVE-2025-55885

CVE-2025-55885 Description SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Ligne before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php Attack Vectors SQL injection via unsanitized GET parameter ocid on...

CVE-2025-64459-Poc

CVE-2025-64459: Django ORM SQL Injection PoC Vulnerability: SQL Injection via QuerySet and Q keyword argument unpacking. CVE ID: CVE-2025-64459 Discovered By: Me Cyberstan Disclosure Date: November 5, 2025 🚨 Executive Summary This repository contains a Dockerized Proof of Concept PoC demonstratin...

CVE-2022-42098

KLiK-SocialMediaWebsite 版本 v1.0.1 漏洞说明： KLiK-SocialMediaWebsite v1.0.1 在 profile.php 的 id 参数存在 SQL 注入漏洞。 攻击向量： KLiK-SocialMediaWebsite v1.0.1 一旦创建用户，也可以通过 KLiK 用户页面在 KLiK 上查找人员。profile.php 的 'id' 参数可被滥用，用于注入任意 SQL 查询。 受影响： http://ipaddress/KLiK/profile.php?id=userid GET /KLiK/login.php Payload：...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 es una vulnerabilidad de inyección SQL identificada en el sistema MODAPS de NASA EOSDIS, causada por una validación de entrada incorrecta en el parámetro category. Esta vulnerabilidad permite a los atacantes acceder a datos sensibles y ejecutar consultas SQL arbitrarias mediante la...

analise-vulnerabilidades-zabbix-notebooklm

🛡️ SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity 📋 Table of Contents Context and Objectives Source...

CVE-2026-101012

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

CVE-2026-101013

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...