sqlmate

sqlmate Ci sono alcune funzionalità che pensiamo SQLMap dovrebbe avere. Come trovare il pannello di amministrazione del target, un miglior cracking degli hash, ecc. Se la pensi allo stesso modo, SQLMate fa per te. Cosa fa? Fornisci un dork di SQL injection tramite l'opzione --dork e troverà siti...

Exploit for SQL Injection in Ghost

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content AP...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

blind-sql-bitshifting

Blind SQL Injection tramite bitshifting Questo è un modulo che esegue blind SQL injection utilizzando il metodo del bitshifting per calcolare i caratteri invece di indovinarli. Richiede 7/8 richieste per carattere, a seconda della configurazione. Utilizzo root@kitploit: import blind-sql-bitshifti...

drupal-jsonapi-sqli-scanner

CVE-2026-9082 — Injeção SQL em Drupal PostgreSQL Scanner em Massa e Ferramenta de Exploração Injeção SQL não autenticada no Drupal Core PostgreSQL Injeção de chave de array de filtro JSON:API via abuso do nome do placeholder PDO Visão Geral CVE-2026-9082 é uma vulnerabilidade de injeção SQL...

SQLiScanner

SQLiScanner Iniezione SQL automatica con Charles e sqlmapapi 中文版说明文档点这里 Introduzione Iniezione SQL automatica con Charles e sqlmapapi Dipendenze Django PostgreSQL Celery sqlmap redis Piattaforme supportate...

sqliv

SQLiv Massiver SQL-Injection-Scanner Eigenschaften 1. Mehrfach-Domain-Scanning mit SQL-Injection-Dork über Bing, Google oder Yahoo 2. Gezieltes Scanning durch Angabe einer bestimmten Domain mit Crawling 3. Reverse-Domain-Scanning Sowohl SQLi-Scanning als auch Domain-Info-Prüfung werden in...

explo

إكسبلو explo هي أداة بسيطة لوصف مشكلات أمن الويب بتنسيق قابل للقراءة من قبل البشر والآلات. من خلال تعريف سير عمل من الطلبات/الشروط، يمكن لـ explo استغلال المشكلات الأمنية دون الحاجة إلى كتابة سكريبت. هذا يتيح مشاركة الثغرات المعقدة بتنسيق بسيط قابل للقراءة والتنفيذ. مثال لاستخراج رمز csrf واستخدا...

AutoSQLi

AutoSQLi, il nuovo modo in cui gli script-kiddies hackerano i siti web Caratteristiche Sistema di salvataggio - esiste un sistema di salvataggio completo, che può riprendere anche quando il tuo PC si è bloccato. - la tecnologia è figa Dorking - da riga di comando un dork: SÌ - da un file: NO -...

sqlmap-ai

SQLMap KI-Assistent Ein KI-gestützter Wrapper um SQLMap, der SQL-Injection-Tests zugänglicher und automatisierter macht. Funktionen Kernfunktionen KI-gestütztes Testen – Intelligente Schwachstellenanalyse und Empfehlungen Adaptives Testen – Schrittweises Testen, das sich an die Antworten des Ziel...

CVE-2026-77392

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2023-1454-EXP

JeecgBoot SQL CVE-2023-1454 exp 1. Dettagli della vulnerabilità La versione 3.5.0 di jeecg-boot presenta una vulnerabilità di SQL injection. La vulnerabilità deriva da un problema di sicurezza nel file jmreport/qurestSql, attraverso il parametro apiSelectId che causa SQL injection. 2. Utilizzo...

EUVD-2026-63793

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-77392 SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-77392

The "Researcher" argument in the saveUser function of /public/submit.php (SourceCodester Dynamic Input Field Generator v1.0) is passed unsanitized to SQL queries, enabling remote SQL injection. CVSS 6.3 (MEDIUM). A public PoC exploit exists at https://gist.github.com/rionyxraiza/6b22a5e02da6b8581...

wp2shell-PoC

wp2shell-PoC ⚠ Dieses Tool dient ausschließlich zu Bildungs- oder Bug-Bounty-Zwecken. Unautorisierte Nutzung außerhalb kontrollierter Umgebungen ist strengstens untersagt. Übersicht Proof-of-Concept für die wp2shell-Verwundbarkeitskette, die den WordPress Core betrifft und CVE-2026-63030 mit...

EUVD-2026-63775

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...

EUVD-2026-63690

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

EUVD-2026-63624

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-16520

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...