CVE-2026-76904

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...

EUVD-2026-64133

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904

GeoTools (open-source Java geospatial library) is affected by an unauthenticated SQL injection in the jsonArrayContains OGC Filter function within the PostGIS DataStore implementation. Affected versions are 30.5 through 33.5 (branch 33) and through 34.4 (branch 34). The root cause is that the pa...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc 针对 VICIdial 的 VERMAJAXfunctions.php 端点（CVE-2024-8503）的未认证基于时间的盲 SQL 注入概念验证。本项目仅用于授权的安全测试、验证和教育目的。 概述 CVE-2024-8503 是 VICIdial 中的一个未认证 SQL 注入漏洞，精心构造的 Basic Auth 用户名值可以到达 VERMAJAXfunctions.php 中的易受攻击查询逻辑。此 PoC 使用基于时间的推断来确认可利用性，并以受控方式提取有限的元数据和表数据。 功能特性 基于时间的盲 SQ...

PoC

PoC 개념 증명PoC 익스플로잇과 도구를 위한 저장소입니다. BMCRSCDRCE BMC Server Automation의 RSCD 에이전트를 위한 인증되지 않은 원격 명령 실행 익스플로잇입니다. 이 익스플로잇은 CVE-2016-1542의 영향을 받는 서버에서 작동합니다Nessus로 탐지됨. 이제 Metasploit 모듈입니다. exploits/multi/misc/bmcserverautomationrscdnshrce를 참조하세요. 이 익스플로잇은 Nessus가 패킷을 기록하고 이를/정크를 Nessus로 다시 보내는 Python...

Exploits

エクスプロイト 実世界とCTFのエクスプロイトPOC。 実世界 CVE| 概要| エクスプロイト ---|---|--- CVE-2017-5343| Wordpress SQLインジェクション| POC CVE-2018-8880| 認証なしのLutron Quantum Bacnet v2ネットワーク情報の外部漏えい| POC CVE-2018-11629| Homeworks QS Lutron統合プロトコルにおけるデフォルトかつ削除不可能な認証情報。| POC CVE-2018-11653| ネットワークチップセットデータを介した認証なしNetwaveカメラの情報漏えい。| PO...

CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Hackthebox Machine: CCTV アプリケーション: ZoneMinder 説明 同じ文字に対して複数回の時間ベースのブラインドインジェクションを実行し、最も頻繁に現れる結果を選択することで、エラーを大幅に削減し信頼性を向上させますが、時間がかかります。...

CVE-2026-56292-AcyMailing-SQLi

CVE-2026-56292 — AcyMailing for Joomla 未認証SQLインジェクション 著者: nullwhisper 許可されたセキュリティ研究/脆弱性検証のみを対象としています。 AcyMailing for Joomla は、公開フロントエンドタスク frontentityselect::loadEntityFront を公開します。古いバージョンでは、columns パラメータがサニタイズなしでSQLクエリに直接渡されます。パッチ適用済みバージョンでは acymsecureDBColumn を使用し、... not secured のようなエラーを返します。...

CVE-2026-76613

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content into SQL queries...

EUVD-2026-63937

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content into SQL queries...

CVE-2026-76613 Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content into SQL queries...

CVE-2026-76613 Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40

Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content into SQL queries...

CVE-2026-76613

YOOtheme Pro (a Joomla extension by yootheme.com) versions 1.0.0 through 5.0.40 are affected by an authenticated, privileged SQL injection vulnerability. Any user with contributor-level access can inject arbitrary content into SQL queries, resulting in high impact on the confidentiality, integrit...

POC-CVE-2026-65971

CVE-2026-65971 — 通过 sortDirection 在 Livewire PowerGrid 中实现 SQL 注入 针对 CVE-2026-65971 / GHSA-7fgc-3h6c-698r 的概念验证及完整技术文档， 这是 power-components/livewire-powergrid 中的一个 SQL 注入漏洞， 可通过公开的 Livewire 属性 sortDirection 触发。...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder ブラインドSQLインジェクション PoC ZoneMinder の CVE-2024-51428 を悪用するための sqlmap の Python ラッパーです。 このツールは、ブラインドSQLインジェクション 脆弱性の検出と悪用を自動化し、出力をクリーンにして有用なデータに集中させます。 スクリプトは sqlmap のログを非表示にし、以下のような関連情報のみを表示します。 検出されたインジェクションポイント データベース名 テーブル ダンプされた資格情報や機密データ これにより、CTF環境、デモ、セキュリティテスト...

WordPress Product Shortlist plugin <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products vulnerability

Unauthenticated SQL Injection via getshortlistedproducts vulnerability discovered by João Ramos Maciel in WordPress Plugin Product Shortlist versions = 1.0.4...

CVE-2026-14601

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...