Blisqy

1. Blisqy Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability. The exploitation enables slow data siphon from a database currently supports MySQL/MariaDB only using bitwise operation on printable...

CVE-2026-101091

SiYuan versions before v3.8.4 are vulnerable to a SQL injection flaw because they fail to properly validate SQL statements in block query embed blocks executed against siyuan.db . An attacker can craft malicious .sy documents containing non-read-only SQL statements. These statements execute autom...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

CVE-2025-22352

1️⃣ Tipo de componente Plugin de WordPress 2️⃣ Detalles del componente Nombre del componente ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Versión vulnerable = 1.4.8 Slug del componente elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Enlace del componente...

CVE-2025-24799

CVE-2025-24799 SQLi Scanner A fast SQL injection vulnerability scanner built with Python. Uses time-based SQLi detection with multithreading and colorful output, designed for testing CVE-2025-24799 vulnerabilities. Features Scans single URLs or lists from files Shows vulnerable URLs live as they'...

Jeeves

Jeeves Usage • Installation Jeeves is made for looking to Time-Based Blind SQLInjection through recon. Contents: Installation Usage Adding Headers Using Proxy Making Post Request Multiple ways of usage - Installation & Requirements: Installing Jeeves 💀 root@kitploit: $ go install...

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

CVE-2021-24741

CVE-2021-24741 Múltiples Inyecciones SQL Sin autenticación en Support Board v 3.3.3 Descripción root@kitploit: Support Board V 3.3.3 Múltiples vulnerabilidades de Inyección SQL en Support Board Versión 3.3.3 que permiten a un atacante remoto no autenticado ejecutar comandos SQL arbitrarios a trav...

CVE-2024-1071-PoC-Script

CVE-2024-1071 Exploit Script 🚀 🌟 Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

Netgear-ssl-vpn-20211222-CVE-2022-29383

Netgear-ssl-vpn-20211222 CVE-2022-29383 NETGEAR ProSafe SSL VPN SQL injection vulnerability exists in scgi-bin/platform.cgi Firmware version： FVS336Gv2 - FVS336Gv3 sqlmap command SQL Injection Vulnerability : USERDBDomains.Domainname...

google-dorks-bug-bounty

Google Dorks for Bug Bounty A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting Live Tool Broad domain search w/ negative search root@kitploit: site:example.com -www -shop -share -ir -mfa PHP extension w/ parameters root@kitploit: site:example.com ext:php inurl:? API...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Corrupción de Memoria mediante Inyección SQL Se puede producir un desbordamiento de búfer en el montón al llamar al procedimiento almacenado extendido no documentado "spreplwritetovarbin". Esta vulnerabilidad afecta a todas las versiones de...

mssqli-duet

MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...

CVE-2023-46954

CVE-2023-46954 Vulnerabilidad de inyección SQL en Relativity Server 2022 v.12.1.537.3 Parche 2 y anteriores permite a un atacante remoto ejecutar código arbitrario a través del parámetro name. Tipo de Vulnerabilidad Inyección SQL Vendedor del Producto Relativity ODA LLC Base de Código del Product...

CVE-2026-57821-PoC-Exploit

🛡️ CVE-2026-57821 – Apache Fineract SQL Injection ⚠️ LEGAL & ETHICAL NOTICE This toolkit is provided strictly for educational, training, and authorized security testing purposes. Unauthorized use against any system without explicit written permission is illegal and violates computer crime laws. The...

CVE-2024-8309

Prueba de Concepto para la Vulnerabilidad CVE-2024–8309 de Langchain Descripción general Esta configuración demuestra una prueba de concepto de la vulnerabilidad de inyección de prompts en la clase GraphCypherQAChain que permite la inyección de SQL en una base de datos Neo4j. Componentes: 1. Base...

CVE-2024-6670

CVE-2024-6670 PoC para la vulnerabilidad de inyección SQL y omisión de autenticación HasErrors en Progress Software WhatsUp Gold CVE-2024-6670 Se puede encontrar un análisis de causa raíz de la vulnerabilidad en mi blog: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ Uso...

Valve-Press-CVE-2024-27956-RCE

Valve-Press-CVE-2024-27956-RCE Valve Press - CVE-2024-27956-RCE - Inyección SQL...

CVE-2024-51482

CVE-2024-51482 - Inyección SQL Ciega en ZoneMinder Tabla de Contenidos Resumen Detalles de la Vulnerabilidad Análisis Técnico Guía de Explotación Instalación Ejemplos de Uso Mitigación Referencias Resumen CVE-2024-51482 es una vulnerabilidad crítica de inyección SQL de tipo booleano ciego...