CVE-2026-76571 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery. An unauthenticated attacker can supply arbitrary SQL through...

CVE-2022-0739

CVE-2022-0739 BookingPress 1.0.11 - Nicht authentifizierte SQL-Injection Das Plugin versäumt es, die vom Benutzer bereitgestellten POST-Daten ordnungsgemäß zu bereinigen, bevor sie in einer dynamisch erstellten SQL-Abfrage verwendet werden, und zwar über die AJAX-Aktion...

CVE-2021-32789

CVE-2021-32789 Authentifizierte Blind-SQL-Injection. WordPress-WooCommerce-Plugin-Versionen = 2.5.0 Installation root@kitploit: git clone https://github.com/DonVorrin/CVE-2021-32789.git cd CVE-2021-32789 sudo pip install -r requirements.txt Exploit root@kitploit: python3 exploit.py Enter URL:...

joomla.3.7.0exploit

CVE-2017-8917 PoC de SQLi no Joomla Este repositório contém uma prova de conceito PoC simples e adequada para CTF da vulnerabilidade de injeção SQL comfields do Joomla CVE-2017-8917. O objetivo é manter o fluxo de trabalho leve, enquanto ainda mostra o fluxo completo de exploração: detecção,...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 هي ثغرة حقن SQL تم تحديدها في نظام MODAPS التابع لـ NASA EOSDIS، ناتجة عن التحقق غير السليم من الإدخال في معامل category. تسمح هذه الثغرة للمهاجمين بالوصول إلى بيانات حساسة، وتنفيذ استعلامات SQL عشوائية من خلال التلاعب بمعامل HTTP GET باستخدام تقنيات مثل حقن SQL القائم على الأخطاء...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – Iniezione SQL non autenticata in FreePBX verso RCE PoC Questo repository contiene due script Proof-of-Concept PoC in Python che mirano a CVE-2025-57819 , una vulnerabilità critica di iniezione SQL non autenticata in FreePBX. 🧠 Informazioni sulla vulnerabilità CVE-2025-57819...

wp2shell-compromise-scanner-plugin

wp2shell के लिए कॉम्प्रोमाइज़ स्कैनर केवल-पठन एक स्वतंत्र, केवल-पठन WordPress प्लगइन जो आपके डेटाबेस और प्लगइन निर्देशिका को इस बात के संकेतों के लिए स्कैन करता है कि wp2shell कोर श्रृंखला CVE-2026-63030 + CVE-2026-60137 का शोषण किया गया था — भले ही यह हफ्तों पहले हुआ हो या हमलावर ने सफाई कर दी ह...

cms-made-simple-python3

CMS Made Simple – Toolkit di Exploit Una raccolta di script, note e exploit pronti per Python3 per CMS Made Simple CMSMS , inclusa la famosa SQL Injection Time-Based non autenticata – CVE-2019-9053. Questo repository è creato e mantenuto da Encrypticle Jagdeep Singh come parte della mia ricerca...

CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modifiziert Beschreibung Dies ist eine modifizierte Version des zeitbasierten SQL-Injection-Exploits für CMS Made Simple = 2.2.9. Der Exploit wurde ursprünglich von Daniele Scanu erstellt und für eine bessere Kompatibilität und moderne...

PT-2026-79578

Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.7.3 Description An unauthenticated SQL injection exists in the list models where the order parameter is used in queries without proper validation. This allows attackers to use read SQLi vectors to extract information...

PT-2026-79571

Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.7.2 Description An unauthenticated attacker can perform a SQL injection by supplying arbitrary SQL through the condition parameter passed to a list filter. This occurs because the parameter is concatenated verbatim...

lab-cve-2025-57819

Lavori in corso FreePBX CVE-2025-57819 Lab - SQLi non autenticata → Catena RCE Nuclei POC Avvia un laboratorio FreePBX 15 riproducibile Docker per validare CVE-2025-57819 — una critica SQL injection non autenticata negli endpoint AJAX di userman che può essere concatenata per ottenere RCE. Includ...

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: SQLi-Patch für den Metabase-Setup-Endpunkt Dieses Repository enthält den Hotfix für CVE-2026-72898 , eine nicht authentifizierte SQL-Injection-Schwachstelle im Setup-Endpunkt von selbst gehosteten Metabase-Instanzen. Ohne den Patch können Angreifer die Validierung des Setup-Tokens...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

One-Liner-Collections

One-Liner-Collections Este repositório contém uma lista de One-Liners com descrições e requisitos de instalação. ──────────────────────────────────────────────────────────────────────── Injeção SQL Requisitos de Instalação 1. Subfinder : https://github.com/projectdiscovery/subfinder 2. GAU :...

CVE-2026-76904

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...

EUVD-2026-64133

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

CVE-2026-76904 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...