sqlifinder

SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 is a SQL Injection vulnerability identified in the MODAPS system of NASA EOSDIS, caused by improper input validation in the category parameter. This vulnerability allow attackers to access sensitive data, and execute arbitrary SQL queries through HTTP GET parameter manipulation usi...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

analise-vulnerabilidades-zabbix-notebooklm

🛡️ SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity 📋 Table of Contents Context and Objectives Source...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

idasql

IDASQL Give any AI agent the ability to understand compiled binaries. IDASQL is a SQL interface for IDA Pro databases, created by Elias Bachaalany. It exposes 30+ virtual tables covering functions, cross-references, strings, types, imports, disassembly, and decompilation. Use /idasql skills from...

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa is susceptible to a SQL Injection SQLi vulnerability. This flaw allows attackers to inject malicious SQL commands that can manipulate the database, potentially compromising the application's data integrity and security...

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10547 info: nam...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injection ★ CVE-2026-0603 Hibernate SQL Injection PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Overview CVE-2026-0603 is a Second-Order SQL Injection vulnerability in Hibernate ORM , a widely used Ja...

CVE-2026-108814

A SQL injection vulnerability exists in SEMCMS versions up to 5.0 . The flaw impacts an unknown function within the SEMCMS_Banner.php file, allowing for remote execution of a manipulation that can lead to unauthorized database access. The documents confirm that an exploit has been published and m...

EUVD-2026-97293

A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMSBanner.php. Executing a manipulation can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this...

CVE-2024-45265

CVE-2024-45265 Suggested description A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3132 allows remote attackers to execute arbitrary SQL commands via the psid parameter. Vulnerability Type CWE-89 | SQL Injection Vendor of Product SkySystem https://skyss.ru/...

sqlipy

sqlipy SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. SQLMap comes with a RESTful based server that will execute SQLMap scans. This plugin can start the API for you or connect to an already running API to perform a scan. Requirements Jython 2.7 up to 2.7.2 D...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

WAF-A-MoLE

WAF-A-MoLE A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool f...

BurpSentinel

Burp Sentinel Eases discovery of common security holes in web applications. Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction Blog: http://dobin.github.io/ With BurpSentinel it is possible for the penetration tester to quickly and easily send a lot...

CVE-2026-108813

A SQL injection vulnerability exists in SEMCMS versions up to 5.0 , specifically affecting an unknown function within the SEMCMS_Download.php file. An attacker can initiate this attack remotely by performing a manipulation. The exploit is currently public . No remediation or patch information has...

EUVD-2026-97289

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMSDownload.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about th...