262436 matches found
CVE-2025-1094-Exploit
CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repository contains a proof of concept PoC exploit for CVE-2025-1094 , a vulnerability in PostgreSQL that allows an SQL Injection SQLi attack to escalate to Remote Code Execution RCE through WebSocket hijacking. Overview This exploit...
CVE-2026-116049
A SQL injection vulnerability exists in the Registration Wizard component of the krupalshah EmployeeRecruitmentSystem (up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe). The flaw resides in the mysql_query function within the /source/registerform2.php file. Attackers can achieve remote code ...
EUVD-2026-109375
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file /source/registerform2.php of the component Registration Wizard. Executing a manipulation of the argument...
CVE-2023-43144
CVE-2023-43144 Description Assets Management System 1.0 is vulnerable to SQL injection via the id parameter in delete.php PoC sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Code review delete.php ?php include 'core/init.php'; $id = $GET'id';...
exploits-rconfig
exploits Three exploits for rconfig = 3.9.4 : CVE-2019-19509 : authenticated RCE CVE-2019-19585 : Local Privilege Escalation root CVE-2020-10220 : unauthenticated SQLi rconfigrootRCEunauth.py : chaining the three CVEs above to get root reverse shell without authentication...
CVE-2024-29824
CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution Vulnerability Proof of concept exploit to blindly execute commands on vulnerable Ivanti EPM appliances. Blog Post Deep dive and indicators of compromise here:...
CVE-2020-35545
CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...
AOSP-DownloadProviderDbDumperSQLiLimit
AOSP-DownloadProviderDbDumperSQLiLimit PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter CVE-2019-2196 Security Advisory Android AOSP Download Provider SQL Injection in Query Sort Parameter CVE-2019-2196 Demo...
CVE-2025-29529
SQLi ITC Multiplan CVE-2025-29529 Discovery On February 21, 2025, an SQL injection vulnerability was identified in the “Multiplan” platform developed by ITC Systems during a client engagement. Affected Versions This vulnerability has been only been tested on v3.7.4.1002 Attack Vector The...
Valve-Press-CVE-2024-27956-RCE
Valve-Press-CVE-2024-27956-RCE Valve Press - CVE-2024-27956-RCE - SQL Injection...
CVE-2022-31101
CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi CVE-2022-31101 Usage python3 cve-2022-31101.py Give the url to the wishlist when prompted. Example of a url: http://example.com/module/blockwishlist/view?idwishlist=1 Give the cookies for your account when prompted. Now it will...
CVE-2026-42208_lab
LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduction environment for the SQL injection vulnerability in LiteLLM Proxy's API key authentication flow. Vulnerability Summary Item| Detail ---|--- Advisory| GHSA-r75f-5x8p-qvmc Type| SQL Injection CWE-89 Severity| Critical Affected| litellm...
sqlmc
SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...
CVE-2026-42167-Exploit
CVE-2026-42167 Master Exploit Tool A professional security research tool for exploiting the CVE-2026-42167 vulnerability in ProFTPD's modsql module. This tool performs unauthenticated SQL injection to exfiltrate sensitive files from the server via time-based side-channel attacks. "Note: The...
CVE-2023-41507
CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Vulnerability Type SQL Injection Vendor of Product Super Store Finder Affected Product Code...
CVE-2023-3163-SQL-Injection-Prevention
CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...
CVE-2026-44680-MikroORM-SQL-Injection-Exploit-Framework
CVE-2026-44680 - MikroORM SQL Injection Exploit Framework Professional Proof-of-Concept Tool for Security Researchers 🔍 Overview CVE-2026-44680 is a critical SQL injection vulnerability affecting MikroORM, a popular TypeScript ORM for Node.js. This exploit framework provides security researchers...
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa is susceptible to a SQL Injection SQLi vulnerability. This flaw allows attackers to inject malicious SQL commands that can manipulate the database, potentially compromising the application's data integrity and security...
bbqsql
BBQSQL A Blind SQL Injection Exploitation Tool Table Of Contents What is BBQSQL? Overview of Readme High Level Usage Install BBQSQL Options Query Syntax Overview HTTP Parameters Export Config Import Config Custom Hooks Found a Bug? Can I Help? What's Up with the Name? What is BBQSQL? Blind SQL...