CVE-2026-68068 Toptech TMS7 and TopHAT SQL Injection

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-68954

The Toptech TMS7 and TopHAT applications are vulnerable to a time-based blind SQL injection vulnerability. The flaw exists in the "pattern" parameter utilized by the search function on the application's home page. This vulnerability allows an attacker to execute SQL commands and infer data based ...

CVE-2026-68954 Toptech TMS7 and TopHAT SQL Injection

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954 Toptech TMS7 and TopHAT SQL Injection

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-63713

The Toptech TMS7 and TopHAT systems are vulnerable to a time-based blind SQL injection vulnerability. This security flaw exists within the "search" parameter of the view audit logs feature, located in the utilities section. Impacting the confidentiality and availability of the system, the vulnera...

CVE-2026-63713 Toptech TMS7 and TopHAT SQL Injection

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-63713 Toptech TMS7 and TopHAT SQL Injection

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-72510 Toptech TMS7 and TopHAT SQL Injection

The "supplierno" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection...

CVE-2026-72510 Toptech TMS7 and TopHAT SQL Injection

The "supplierno" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection...

CVE-2026-72510

The Toptech TMS7 and TopHAT systems are vulnerable to a time-based blind SQL injection flaw. The vulnerability exists within the **

not-going-anywhere

Resumen Not Go-ing Anywhere es un conjunto de programas Golang vulnerables pensados para mostrar vulnerabilidades comunes y proporcionar un banco de pruebas para que los usuarios encuentren, corrijan y remedien vulnerabilidades de Golang. Está modelado a partir de nuestro repositorio not so smart...

CVE-2017-8917

CVE-2017-8917 CVE-2017-8917 - Inyección SQL 'comfields' en Joomla 3.7.0. Dependencias : pip install art pip install beautifulsoup4 Exploit : python cve20178917.py...

CVE-2025-32429-Checker

CVE-2025-32429 Vulnerability Checker A Python-based vulnerability scanner for detecting CVE-2025-32429 SQL injection vulnerability in XWiki platforms. Features Single Target Scanning : Check individual targets with -t option Bulk Scanning : Scan multiple targets from a file with -l option WAF...

CVE-2023-39361

CVE-2023-39361 Unauthenticated SQL injection in Cacti v1.2.24 Overview Cacti is an open-source operational monitoring tool written in PHP, MySQL/MariaDB, which provides a friendly interface. The vulnerability was found in 2023 which affected all versions before 1.2.24. This security flaws lies in...

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

CVE-2026-79536

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...

CTF_Django_CVE-2022-34265

CTFCVE-2022-34265 Description An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a know...

sqlwinds

SQLWinds SQL Security Assessment & Post-Exploitation Toolkit SQLWinds is a command-line tool for security testing and exploiting Microsoft SQL Server. It provides an interactive environment to deeply analyze servers, escalate privileges, execute attacks, and pivot through networks all with...

WordPress WP Directory Kit plugin <= 1.5.4 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by zickzick2 in WordPress Plugin WP Directory Kit versions = 1.5.4...

CVE-2019-9053-python3-remastered

CVE-2019-9053-python3-remastered El script ha sido remasterizado por Teymur Novruzov para garantizar la compatibilidad con Python 3. Esta herramienta está destinada únicamente a fines educativos. El uso no autorizado de esta herramienta en cualquier sistema o red sin permiso es ilegal. El autor n...