262400 matches found
CVE-2023-25157
Vulnerability Description Due to the lack of input filtering, remote unauthenticated attackers can craft malformed filter syntax, bypass GeoServer's lexical parsing, leading to SQL injection, obtaining sensitive information from the server, and possibly gaining database server privileges. Affecte...
CVE-2023-24775-and-CVE-2023-24780
CVE-2023-24775-and-CVE-2023-24780 my python poc 2023-24780 and CVE-2023-24775 this sqli cve funadmin This is a repository with a poc exploit for python cve sqli funadmin. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 Vulnerable version of Funadmin v3.2.0 Vulnerability via id...
CVE-2024-6043
CVE-2024-6043 CVE-2024-6043 CVE-2024-6043 Overview This Python tool exploits the CVE-2024-6043 vulnerability, which affects the SourceCodester Best House Rental Management System 1.0. The vulnerability allows remote attackers to perform SQL Injection via the adminclass.php file, specifically...
CVE-2026-63030-Wp2Shell
CVE-2026-63030 wp2shell โ WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR โ An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...
opendcim-exploit
openDCIM - SQLi to RCE via Config Poisoning Remote code execution chain targeting openDCIM's install.php LDAP configuration form. Built on the VulnCheck go-exploit framework. Vulnerability Chain | CVE| CWE| Description ---|---|---|--- 1| CVE-2026-28515| CWE-862| install.php performs no role check...
CVE-2026-101108
CVE-2026-101108 โ OrdaSoft Vehicle Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101108 โ OrdaSoft Vehicle Manager Free Joomla extension โค 6.5.7. Fixed in 6.5.8+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101108 Catalog| https://pocbit.org/pocs/ Component|...
sqlifinder
SQL Injection scanner made with python. Features โข Install โข Usage โข sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...
Metinfo-6.1.2-SQL-injection
Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...
CVE-2026-100752
CVE-2026-100752 โ OrdaSoft Real Estate Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-100752 โ OrdaSoft Real Estate Manager Free Joomla extension โค 6.7.8. Fixed in 6.7.9+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-100752 Catalog| https://pocbit.org/pocs/ Component|...
sqlmap-ai
SQLMap AI Assistant An AI-powered wrapper around SQLMap that makes SQL injection testing more accessible and automated. Features Core Features AI-Assisted Testing - Intelligent vulnerability analysis and recommendations Adaptive Testing - Step-by-step testing that adapts to target responses...
CVE-2025-7461
CVE-2025-7461: SQL Injection Vulnerability Analysis in Modern Bag E-commerce System ๐ Language / ่ฏญ่จ : English | ็ฎไฝไธญๆ Vulnerability Overview Vulnerability Database: https://vuldb.com/?id.316112 Project Source: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/ Item...
CVE-2021-35042
CVE-2021-35042 SQL injection via QuerySet.orderby untrusted input Setup: Start the instances using: docker-compose up Now open the following URL to load sample data: http://localhost:8000/vulapp/setup Then go to the vulnerable page at: http://localhost:8000/vulapp/ Exploit the parameter at:...
CVE-2024-1071-PoC-Script
CVE-2024-1071 Exploit Script ๐ ๐ Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end userโs responsibility to obey all applicable local, state, and federal...
ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227
ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227 CVE-2024-25227 Exploit CVE-2024-25227 is a ABO.CMS 5.8 SQLi vulnerability found in the parameter "tblogin" PoC: POST /login.aspx HTTP/1.1 Host: localhost Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...
CVE-2025-2011
CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability CVE Reference: CVE-2025-2011 This repository contains a proof-of-concept environment for testing the SQL injection vulnerability in Depicter Slider & Popup Builder plugin versions 3.6.2. Prerequisites Docker Docker Compose Python 3.x...
wp2shell-poc
wp2shell-poc Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory. This repository is not Searchlight Cyber's official checker. check confirms the SQLi path, read demonstrates database read, a...
CVE-2024-8484
CVE-2024-8484 REST API TO MiniProgram = 4.7.1 - Unauthenticated SQL Injection CVE: CVE-2024-8484 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Score: 7.5 Slugs: rest-api-to-miniprogram Description: The REST API TO MiniProgram plugin for WordPress is vulnerable to SQL Injection via the...
heroku-CVE-2013-0269
heroku-CVE-2013-0269 Inspect all of your heroku apps to see if they are running a vulnerable version of JSON Background A security vulnerability has been found in the Ruby JSON gem. This is the root cause for the recently-announced MySQL injection issue in Rails. A new release of the JSON gem is...
CVE-2026-34220
CVE-2026-43220 MikroORM SQL Injection โ CVE-2026-43220 MikroORM SQL Injection PoC โ https://github.com/user-attachments/assets/33724cfc-6151-47ff-9415-2f50c5124cd1 Overview CVE-2026-43220 is a SQL Injection vulnerability in MikroORM , a widely used TypeScript/Node.js ORM framework. When a...
CVE-2026-26980
CVE-2026-26980 โ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC โ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Overview CVE-2026-26980 is an unauthenticated SQL Injection vulnerability in TryGhost Ghost CMS Content API. The vulnerable path is...