WordPress Tickera plugin <= 3.6.0.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rasyid Abdi Gantoro in WordPress Plugin Tickera versions = 3.6.0.6...

CVE-2026-23723-POC

CVE-2026-23723 PoC - WeGIA Authenticated SQL Injection Exploit Helper Authenticated Error-Based SQL Injection in WeGIA ≤ 3.6.1 GHSA-xfmp-2hf9-gfjp | Official Advisory POC Original Author / Reporter : ViniCastro2001 GHSA Published by : nilsonLazarin project maintainer This lightweight Python scrip...

Zabbix-CVE-2024-42327-SQL-Injection-RCE

Zabbix-CVE-2024-42327 RCE PoC / / | / / / | \ / \ / // / / // /| | / / / / / | | / / // // / / // / // // // // / / / / / / / / | |/ / /// // // / / // / // / / / / / |// //// // // //// // NSFOCUS CERT detected that Zabbix released a security announcement and fixed the SQL injection...

POC-CVE-2026-63030-CVE-2026-60137-

PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137 -red?style=for-the-badge 📌 Overview WP2Shell is a critical exploit chain in WordPress Core source code that allows a remote unauthenticated attacker to gain full control of the server Full Server Takeover / RCE. The exploit chain combines two securi...

CVE-2025-24799

CVE-2025-24799 Auto Exploit ⚡ Overview CVE-2025-24799 is a proof-of-concept PoC exploit targeting GLPI. This exploit demonstrates unauthenticated SQL Injection time-based blind to extract user credentials. Disclaimer: This PoC is for educational purposes only. Do not use on systems without...

CVE-2026-17543-PHP-Exposure-Validator

PHP CVE-2026-17543 Exposure Validator Safe network-side validator for checking potential exposure to PHP CVE-2026-17543. This project checks whether a remote web server exposes a PHP version affected by CVE-2026-17543 and can optionally perform non-destructive login-form probes using harmless...

CVE-2026-9848

CVE-2026-9848 CVE-2026-9848 is an Unauthenticated SQL Injection SQLi vulnerability affecting the WP Ticket Customer Support Ticket System & Helpdesk plugin for WordPress up to and including version 6.0.4.The flaw occurs because the plugin takes the WordPress search parameter s and concatenates it...

CVE-2026-65321-pyathena

CVE-2026-65321: SQL Injection in PyAthena via Backslash Quote-Escaping for Non-SELECT Statements Severity: Critical, CVSS v4.0 9.3 / CVSS v3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

tbhm

The Bug Hunter's Methodology TBHM Welcome! This repo is a collection of tips tricks tools data analysis and notes related to web application security assessments and more specifically towards bug hunting in bug bounties. The current sections are divided as follows: Before You Get Hacking Learning...

SleuthQL

SleuthQL Description SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers into each parameter where the SQL-esque variables were identified. Supported Request Types SleuthQL requires an export of...

ProxySqlMap

ProxySqlMap From Proxy to SqlMapApi Usage: Modify config.py: 1. Extfilter is the suffix to filter out 2. sqlmap is the SQLmap address 3. url is the URL to intercept 4. admintoken is sqlmap's adminid Set the proxy: 127.0.0.1:8081 Dependencies: 1. requests 2. baseproxy already bundled, no...

Metinfo-6.1.2-SQL-injection

Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...

commend_sqli

CVE-2023-XXXXX Suggested description G8-VOIPREC Commend VoIPRec web interface is vulnerable to time-base blind SQL injections in "Code" parameter on login page. Additional Information PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0...

CVE-2024-36039_PoC

CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

glpi-logbleed

glpi-logbleed Blind SQL injection in the GLPI history log filter. CVE-2026-53629, fixed in 11.0.8 and 10.0.26, broken since 9.4.0. Needs any account with the logs READ right. The stock Read-Only profile has it. Advisory: GHSA-cpcj-x335-5cmh Write-up: how I found it The bug...

EXPLOIT-CVE-2026-40901

DataEase — Unauthenticated RCE via a 4-vulnerability chain CVE-2026-40901 & friends Auth bypass → JDBC blocklist bypass arbitrary file read → SQL injection → Java deserialization in Quartz → remote code execution asroot. Self-contained local lab Docker + working PoC. Fixed in DataEase v2.10.21...

CVE-2026-42208

✦ CVE-2026-42208 - Critical SQL Injection in LiteLLM 🧭 Overview CVE-2026-42208 is a critical pre-authentication SQL injection vulnerability affecting the LiteLLM AI gateway. It allows attackers to exploit backend database queries without authentication , potentially exposing sensitive AI...