CVE-2023-38891

CVE-2023-38891 Vulnerabilidad de inyección SQL autenticada en VTiger Open Source CRM v7.5 Descubierto por: Jacob Elliott 13/07/23 Resumen En el módulo de Informes de VTiger CRM v7.5.0, la verificación de los campos seleccionados para el informe es insuficiente; estos campos se almacenan y luego s...

CVE-2024-23108

CVE-2024-23108 POC Exploit de prueba de concepto para ejecutar comandos a ciegas como root en dispositivos FortiSIEM vulnerables. Solo agregué rápidamente la opción de proporcionar una lista y añadí algo de color. El original y todo el crédito pertenece a horizon3 consulta la publicación del blog...

second-order

Second Order Escanea aplicaciones web para la toma de control de subdominios de segundo orden rastreando la aplicación y recolectando URLs y otros datos que coincidan con ciertas reglas o respondan de cierta manera. Instalación Desde binario Descarga un binario precompilado desde la página de...

second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....

CVE-2018-6376

CVE-2018-6376 Joomla!, Inyección SQL de Segundo Orden Iniciar Joomla! root@kitploit: $ docker-compose up -d Acceder a localhost a través del navegador http://localhost:10080...

CVE-2026-17589

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-17589

The Shopping Cart & eCommerce Store (WP EasyCart) plugin for WordPress is vulnerable to a second-order SQL injection via the product_order parameter in versions up to 5.9.2 . The payload is written to the ec_pageoption table via the ec_ajax_save_page_options handler with no sanitization on raw $_...

EUVD-2026-68970

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-17589 Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor = 3.20.4 — Inyección SQL de segundo orden autenticada Colaborador+...

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — Laboratorio de inyección SQL de segundo orden de EverShop Requisitos previos Docker Engine 24+ con Docker Compose v2+ 2 GB de RAM libre Despliegue root@kitploit: cd EverShop-Lab/ docker compose up Espera 2 minutos para la primera compilación clona EverShop v2.1.0, compila, ejecut...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, pero luego inserta $entry-metakey directamente en la cadena SQL sin escaparla: root@kitploit: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Dado que metakey proviene de la base de datos, el código lo...

CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injection ★ CVE-2026-0603 Hibernate SQL Injection PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Overview CVE-2026-0603 is a Second-Order SQL Injection vulnerability in Hibernate ORM , a widely used Ja...

CVE-2026-27470

⚠️ YASAL UYARI / LEGAL DISCLAIMER Bu araç yalnızca eğitim amaçlı ve yazılı izin alınmış güvenlik testleri için geliştirilmiştir. Sahip olmadığınız veya test etmek için açık yazılı izniniz olmayan sistemlere karşı kullanılması yasadışıdır. Yetkisiz erişim, birçok ülkede ağır cezai yaptırımlara...

CVE-2026-27470-POC

CVE-2026-27470 — ZoneMinder सेकंड-ऑर्डर SQL इंजेक्शन PoC लेखक:d3vn0mi | CVSS 8.8 | प्रमाणित | इवेंट्स अनुमति आवश्यक अवलोकन CVE-2026-27470 ZoneMinder के web/ajax/status.php में एक सेकंड-ऑर्डर SQL इंजेक्शन भेद्यता है — विशेष रूप से getNearEvents फ़ंक्शन में।...

WordPress All-in-One WP Migration and Backup plugin <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability

Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability discovered by Jack Taylor in WordPress Plugin All-in-One WP Migration versions = 7.109...

CVE-2026-19949 All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-19949

The All-in-One WP Migration and Backup WordPress plugin (all versions up to and including 7.109 ) is susceptible to a second-order SQL injection in its archive restore functionality, caused by insufficient escaping of a user-supplied parameter and inadequate preparation of the existing SQL query....

CVE-2026-15023

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'metakey' via Event/Location Duplicate Action in all versions up to, and including, 7.4.0 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-15023 Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'metakey' via Event/Location Duplicate Action in all versions up to, and including, 7.4.0 due to insufficient escaping on the user supplied parameter and lack of...