EUVD-2026-64693

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

RedTeamBrasil-CVE-2025-64459

connector-sqli Automatisierte Ausnutzung von SQL Injection im Django-ORM Q-Objekt connector · CVE-2025-64459 🎥 Kanal RedTeam Brasil — offensive Security, praktisch, auf Portugiesisch. root@kitploit: ██████╗ ████████╗██████╗ connector-sqli ██╔══██╗╚══██╔══╝██╔══██╗ Django Q connector SQLi ██████╔╝...

wordpress-cve-2026-63030

WordPress REST API Batch-Routen-Konfusion + SQL-Injection → RCE Pre-Authentifizierung, nicht authentifiziert, keine Plugins erforderlich. Funktioniert gegen eine Standard-WordPress-Installation über den Batch-Endpunkt der REST-API...

CVE-2024-51482-PoC

CVE-2024-51482-PoC Эксплойт аутентифицированной time-based blind SQL-инъекции для ZoneMinder v1.37. = 1.37.64 Обзор Это proof-of-concept эксплойт для CVE-2024-51482, уязвимости time-based blind SQL-инъекции в функциональности управления событиями ZoneMinder. Эксплойт требует аутентификации и...

WP2Shell-CVE-2026-63030-POC

WP2Shell Detektor und Validierungs-PoC CVE-Abdeckung: CVE-2026-63030 und CVE-2026-60137 Verwendungszweck: Autorisierte Sicherheitstests, defensive Validierung und nur temporäre lokale Labore WP2Shell ist eine WordPress-Core-Verwundbarkeitskette, die einen...

Deep-Reaver

Deep Reaver Deep Reaver è un potente toolkit di valutazione delle vulnerabilità e sfruttamento potenziato dall'IA, costruito in Python. Ispirato a strumenti come Nmap e Nessus, Deep Reaver è progettato per una scansione approfondita e modulare di applicazioni web e servizi. Caratteristiche Analis...

CVE-2026-63030-wp2r00t

wp2r00t - Proof-of-Concept per SQL Injection Blind tramite Confusione di Rotta Batch in WordPress Un proof-of-concept autonomo per l'iniezione SQL blind non autenticata raggiungibile tramite l'endpoint batch REST di WordPress /wp-json/batch/v1. È un'implementazione indipendente costruita a partir...

wp2shell

wp2shell por: ek0ms savi0r Execução Remota de Código Não Autenticada para POC do WordPress Core CVE-2026-63030 + CVE-2026-60137 O exploit wp2shell para uma cadeia de vulnerabilidades críticas no núcleo do WordPress. Ele encadeia um bug de confusão de rota de lote batch da API REST com uma injeção...

WordPresShell

WordPresShell PoC de RCE pré-auth para CVE-2026-63030 + CVE-2026-60137 núcleo do WordPress. Confusão de rota REST /batch/v1 → SQLi via WPQuery authornotin → criação de admin sem autenticação → webshell. Arquivo único, apenas com stdlib do Python. Vulnerabilidade: Adam Kues Searchlight Cyber...

wp2shell-lab

wp2shell-lab PoC e laboratório educativo para CVE-2026-63030 + CVE-2026-60137 : injeção SQL pré-autenticação no core do WordPress via confusão de rota batch. Descoberto por Adam Kues Searchlight Cyber / Assetnote. Corrigido no WordPress 6.9.5 / 7.0.2. Início rápido root@kitploit: iniciar o...

EUVD-2026-64668

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

vuln-bank

Aplicação Bancária Vulnerável 🏦 Uma aplicação web deliberadamente vulnerável para praticar testes de segurança de aplicações Web, APIs e LLMs, revisão de código seguro e implementação de segurança em pipelines de CI/CD. ⚠️ AVISO: Esta aplicação é intencionalmente vulnerável e deve ser usada apenas...

FreePBX-Vulns-December-25

ثغرات FreePBX - ديسمبر 2025 يحتوي هذا المستودع على قوالب Nuclei لاكتشاف ثلاث ثغرات حرجة في FreePBX: CVE-2025-61675 : حقن SQL مُصادَق عليه CVSS 8.6 - يؤثر على وحدة endpoint CVE-2025-61678 : رفع ملفات عشوائي مُصادَق عليه CVSS 8.6 - يؤثر على وحدة endpoint CVE-2025-66039 : تجاوز المصادقة CVSS 9.3 -...

PT-2026-81046

Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

PT-2026-81036

Name of the Vulnerable Software and Affected Versions CakePHP versions prior to 5.1.10 CakePHP versions prior to 5.2.15 CakePHP versions prior to 5.3.7 Description When using the PostgresDriver, the FunctionsBuilder::jsonValue function is susceptible to SQL injection. This occurs when...

PT-2026-81047

Name of the Vulnerable Software and Affected Versions Boost versions 2.0.4 and earlier Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...

CVE-2026-78143

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

CVE-2026-78143

A SQL injection vulnerability exists in the Barangay Resident Profiling Management System 1.0 (code-projects), specifically in the Resident Search Functionality within the file residents.php. The unsanitized Search argument allows a remote, unauthenticated attacker to inject SQL commands. The exp...

CVE-2026-78143 code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...