CVE-2026-62085

The WordPress WP Activity Log plugin (versions

CVE-2026-62085 WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

EUVD-2026-89822

Administrator SQL Injection in WP Activity Log = 5.6.6 versions...

BinGoo

,--="=--, / ." .-. "./ / ,/ : : /\ \ | /o\ :: /o\ | / -'| :=" "=: | \ / .-"-. \ | / .-"-. .--- --| /,.-'-.,\ |-- ---. /-===- / | / | | | | | | ' | | / \ / | | | | | | | | | | | | | || |/| || | || / / '-----v1--------------By-Hood3dRob1n----' Welcome to the BinGoo README file! This should give you...

CVE-2026-103114

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103115

A security flaw exists in OS4ED openSIS-Classic up to version 9.3 within the Student Search component. Specifically, an unknown function in the file functions/CustomFieldsFnc.php is vulnerable to SQL injection when the cust argument is manipulated. This flaw can be triggered via a remote attack ....

EUVD-2026-89799

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...

CVE-2025-26198

CVE-2025-26198 - SQL Injection Demonstration Academic project ENSIMAG - Security 3A Authors: Wail Yacoubi, Mohammed-Yassine Akhmari Date: January 2026 Warning This code is intentionally vulnerable for educational purposes. Never deploy in production. Description Reproduction of CVE-2025-26198:...

CVE-2019-9053-POC

CMS Made Simple ⚠️ Descargo de responsabilidad: Este script es solo para fines educativos y de pruebas autorizadas. No lo utilice en sistemas que no sean de su propiedad o para los que no tenga permiso explícito para probar. El autor y los colaboradores no se responsabilizan por el mal uso o los...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...

CVE

CVE's Table CVE Number| Type| Company/Product| Description| Article Link| Repository Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Missing sanitizati...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

pysqli

PySQLi - Framework de inyección SQL en Python 1. Descripción general PySQLi es un framework de Python diseñado para explotar vulnerabilidades complejas de inyección SQL. Proporciona bloques dedicados que pueden utilizarse para construir exploits avanzados o fácilmente extenderse/mejorarse para...

cve-2024-48325

CVE-2024-48325 Description: An authenticated user can abuse SQL injection vulnerability exists in the getDocuments function of the InstituicaoDocumentacaoController class. The instituicaoid parameter in /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid is not proper...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

CVE-2025-30921

CVE-2025-30921 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Newsletters Vulnerable version = 4.9.9.7 Component slug newsletters-lite Component link https://wordpress.org/plugins/newsletters-lite/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection Vulnerability type...

CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authenticated SQL Injection Usage usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to login with username...

CVE-2024-39306

Description This script is a PoC for CVE-2024-39306, where a RCE is possible due to a SQLi where an authenticated user can execute arbitrary commands on a server running ChurchCRM -p -b -c Example: python3 CVE-2024-39306.py -u FirstLast -p Password123 -b http://localhost/churchcrm -c whoami Links...

WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Business Directory versions = 6.4.27...

WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Activity Log versions = 5.6.6...