Lucene search
+L

249672 matches found

Kitploit
Kitploit
•added 2026/09/28 11:20 p.m.•13 views

CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 SQL Injection in hotel-mgmt-system The hotel-mgmt-system is vulnerable to un-authenticated time based blind SQL Injection attack. The cid parameter on the /processupdateprofile.php page does not sanitize the user input, an attacker can extract sensisitive data from t...

7.5CVSS7.5AI score0.02377EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/28 11:19 p.m.•22 views

CVE-2024-42327

Write-up CVE-2024-42327 Zabbix Vulnerability Target: 10.129.231.176 Information: I know my target is a Zabbix server. I received a default user account to log into Zabbix: user matthew passwd 96qzn0h2e1k3. This account is a default user, without additional groups or privileges. As usual, we start...

9.9CVSS8.5AI score0.78716EPSS
SaveExploits13References2
Kitploit
Kitploit
•added 2026/09/28 11:19 p.m.•11 views

cachet_2.4.0-dev

CVE-2021-39174 Cachet 2.4.0-dev A python3 script for CVE-2021-39174 Cachet 2.4.0-dev Information Disclosure and RCE via Twig Server Side Template Injection. For the RCE the API KEY for the user is needed. Check out the Leave Songs link below which covers how to get the API KEY via SQL Injection...

8.8CVSS7.5AI score0.08172EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 11:18 p.m.•18 views

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Unauthenticated Arbitrary SQL Execution to Remote Code Execution CVE-2024-43918 The WBW Product Table Pro plugin for WordPress is vulnerable to unauthorized arbitrary SQL Execution due to a missing capability check on a function in all versions up to, and...

10CVSS6.5AI score0.01474EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 11:17 p.m.•9 views

CVE-2024-29824

CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution Vulnerability Proof of concept exploit to blindly execute commands on vulnerable Ivanti EPM appliances. Blog Post Deep dive and indicators of compromise here:...

9.6CVSS9.1AI score0.99938EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/28 11:16 p.m.•13 views

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to...

9.1CVSS8.3AI score0.02008EPSS
SaveExploits4References1
Kitploit
Kitploit
•added 2026/09/28 11:14 p.m.•11 views

CTF_CVE-2020-7471

DOBBYISFREE! CTF: 2020 Christmas CTF Category: WEB Keyword: DOBBYISFREE! Difficulty: ★★★☆☆ Background Since web hackers usually study SQL Injection on MySQL, I created this problem using PostgreSQL so that they can experience attacks on various databases. Solution Intended Solution Since the...

9.8CVSS6.7AI score0.65575EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/28 11:11 p.m.•14 views

Astra

Astra Las pruebas de penetración de API REST son complejas debido a los cambios continuos en las API existentes y las API recién agregadas. Astra puede ser utilizado por ingenieros de seguridad o desarrolladores como parte integral de su proceso, permitiéndoles detectar y corregir vulnerabilidade...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 11:11 p.m.•40 views

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 11:10 p.m.•14 views

CVE-2023-43144

CVE-2023-43144 Description Assets Management System 1.0 is vulnerable to SQL injection via the id parameter in delete.php PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Code review delete.php root@kitploit: ?php include...

9.8CVSS8.5AI score0.01094EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/28 10:59 p.m.•15 views

Complete-google-dorks

Complete-google-sql-dorks root@kitploit: news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-"...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 10:58 p.m.•14 views

CVE-2020-25273

CVE-2020-25273 Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection. Vendor - SourceCodester Product -https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html V 1.0...

9.8CVSS8.4AI score0.01813EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/28 10:54 p.m.•13 views

CVE-2024-35468

CVE-2024-35468 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affecte...

6.5AI score0.0035EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 10:54 p.m.•13 views

CVE-2023-38890

CVE-2023-38890 Description Online Shopping Portal Project V3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in t...

8.8CVSS8.4AI score0.01417EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/28 10:53 p.m.•12 views

CVE-2025-29529

SQLi ITC Multiplan CVE-2025-29529 Discovery On February 21, 2025, an SQL injection vulnerability was identified in the “Multiplan” platform developed by ITC Systems during a client engagement. Affected Versions This vulnerability has been only been tested on v3.7.4.1002 Attack Vector The...

5.9AI score0.00313EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 10:50 p.m.•10 views

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

7.8CVSS7.5AI score0.00795EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 10:43 p.m.•12 views

CVE-2024-43018

CVE-2024-43018 Assign an ID Be officially populated in CVE - Mitre Index Description Technologies used Source and Sink How to execute it Fix Authors Description While investigating for the thesis https://hdl.handle.net/10316/118126 and https://hdl.handle.net/10316/118059 a new vulnerability on...

7AI score0.00295EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/28 10:39 p.m.•16 views

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - SQL Injection Login Bypass Description : Customer Support System is vulnerable 1.0 to SQL Injection. A SQL injection vulnerability in Customer Support System 1.0 enables remote, unauthenticated attackers to bypass the authentication process by exploiti...

6.1AI score0.0114EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 10:38 p.m.•14 views

tulpar

Tulpar es un escáner de vulnerabilidades web de código abierto diseñado para automatizar las pruebas de penetración web. Tulpar tiene las siguientes características. Sql Injection GET Method XSS GET Method Crawl E-mail Disclosure Credit Card Disclosure Whois Command Injection GET Method Directory...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 10:38 p.m.•11 views

CVE-2019-14529

CVE-2019-14529 Multiple SQL Injection vulnerability in OpenEMR project Vulnerable function in file: /openemr/interface/forms/eyemag/save.php Conditions : any authorized user Vulnerable versions: 5.0.2, Fixed in 5.0.2 version. Description There are two functions: 1. "storePDF", with non filtered...

9.8CVSS8.3AI score0.28086EPSS
SaveExploits0References2
Rows per page
Query Builder