EUVD-2026-64731

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-78197

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/admin/ajax.php when the action=save_user parameter is set. Manipulating the Username argument allows an unauthenticated remote attacker to inject SQL, potentially leading ...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...

sqlmc

SQLMC - Controllo Massivo di SQL Injection Demo Informazioni Questo strumento è solo per scopi educativi, l'uso di SQLMC per attaccare target senza il preventivo consenso reciproco è illegale. Gli sviluppatori non si assumono alcuna responsabilità e non sono responsabili per qualsiasi uso impropr...

Simple-CTF-Writeup

Simple-CTF-Writeup Walkthrough professionale della room Simple CTF su TryHackMe, che copre enumerazione, SQL Injection su CMS Made Simple CVE-2019-9053, recupero credenziali, accesso SSH, privilege escalation tramite Vim e compromissione della root. TryHackMe - Simple CTF Writeup Una walkthrough...

wp2shell-poc-fulljs

Dimostrazione del flusso logico delle CVE di WordPress Panoramica Questo progetto permette di riprodurre il flusso logico relativo a CVE-2026-63030 e CVE-2026-60137 che porta a un'iniezione SQL, fungendo da base per innescare una RCE in WordPress. CVE-2026-63030 CVE-2026-60137 La dimostrazione...

litellm-sqli-scanner

Scanner de Injeção SQL do LiteLLM CVE-2026-42208 — injeção de SQL no Proxy LiteLLM Detecta e valida a CVE-2026-42208: vulnerabilidade de injeção de SQL na camada de banco de dados do Proxy LiteLLM. Apenas para testes de segurança autorizados. Recursos Detecção de injeção de SQL CVE-2026-42208...

TarantuBench

TarantuBench v1 Ein Benchmark zur Bewertung von KI-Agenten bei Web-Sicherheitsherausforderungen, generiert von der TarantuLabs-Engine. Was ist das? TarantuBench ist eine Sammlung von 100 angreifbaren Webanwendungen, die jeweils eine versteckte Flagge TARANTU... enthalten. Die Aufgabe eines Agente...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Uno script bash che dimostra lo sfruttamento manuale di CVE-2016-10204 contro un endpoint target, portando al caricamento di una webshell php. Attualmente, la variabile webshell è impostata per un payload MySQL. Può essere sostituita con qualsiasi backend sia necessario...

CVE-2026-78182

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

CVE-2026-78185

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-63030

Wordpress Core / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 Il PoC è ora pubblicato. È stato creato solo a scopo educativo/di ricerca! Usalo a tuo rischio e pericolo!...

CVE-2026-36670

CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...

wordpress-batch-rce-lab

wp2shell: WordPress Batch RCE Un'analisi tecnica di CVE-2026-63030, un bug logico nell'endpoint batch dell'API REST del core di WordPress che consente a una richiesta anonima di essere eseguita sotto la rotta e il controllo dei permessi di una richiesta diversa, concatenandosi in CVE-2026-60137 S...

CVE-2026-26980

CVE-2026-26980 — 👻 Ghost CMS SQLi non autenticata tramite Content API Una vulnerabilità di SQL injection era presente nella Content API di Ghost e consentiva ad attaccanti non autenticati di leggere dati arbitrari dal database...

CVE-2026-78185 itsourcecode Sales and Inventory System cust_edit.php sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

EUVD-2026-64721

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-78185

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/cust_edit.php . An authenticated remote attacker can exploit this by manipulating the ID parameter, achieving partial impact on confidentiality, integrity, ...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Mitigazione temporanea di emergenza per CVE-2026-60137 e CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 Descrizione in Inglese Questo plugin leggero per WordPress funge da patch virtuale temporanea mitigazione contro la catena...

CVE-2025-64459-Poc

CVE-2025-64459: PoC di SQL Injection nell'ORM di Django Vulnerabilità: SQL Injection tramite spacchettamento degli argomenti keyword di QuerySet e Q. CVE ID: CVE-2025-64459 Scoperto da: Me Cyberstan Data di divulgazione: 5 Novembre 2025 🚨 Riepilogo Esecutivo Questo repository contiene una Prova d...