jit

JitPass Just-In-Time Secret Protection for Developers & AI Agents Your AI agent can read every secret on your Mac. JitPass makes it ask first. Download for Mac · brew install jitpass/tap/jitpass · Docs · jitpass.com Free for personal and internal company use · No account · No telemetry · Nothing...

CVE-2024-0566

CVE-2024-0566 Smart Manager 8.27.0 - Post-Authenticated SQL Injection Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link:...

CVE-2019-10708

Scms - SQL Injection exploit.py is a PoC for the CVE-2019-10708 vulnerability, implementing multiprocessing for injection to obtain the database name and backend administrator credentials recommended for versions before 20190401 Usage root@kitploit: 測試是否可注入 python3 exploit.py...

CVE-2025-5287

CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-5287 , targeting a vulnerability in the WordPress Likes and Dislikes Plugin ≤ 1.0.0. The vulnerability allows...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wrapper for sqlmap designed to exploit CVE-2024-51428 in ZoneMinder. This tool automates detection and exploitation of a Blind SQL Injection vulnerability while keeping the output clean and focused on useful data. The script hides sqlmap...

Merlion

Merlion：时间序列机器学习库 目录 1. 简介 2. 与相关库的比较 3. 安装 4. 文档 5. 快速开始 1. 异常检测 2. 预测 6. 评估与基准测试 7. 技术报告与引用 Merlion 简介 Merlion 是一个用于时间序列智能的 Python 库。它提供了一个端到端的机器学习框架，包括加载和转换数据、构建和训练模型、后处理模型输出以及评估模型性能。它支持多种时间序列学习任务，包括单变量和多变量时间序列的预测、异常检测和变点检测。该库旨在为工程师和研究人员提供一站式解决方案，以便针对其特定的时间序列需求快速开发模型，并在多个时间序列数据集上对其进行基准测试。...

CVE-2025-50383

CVE-2025-50383 Description A low-privileged authenticated user can exploit this vulnerability by sending a crafted HTTP POST request with a malicious orderby parameter e.g., orderby=IF1=1,SLEEP5,1. This can trigger time-based blind SQL injection, resulting in unauthorized SQL execution on the...

awesome-TS-anomaly-detection

awesome-TS-anomaly-detection 用于时间序列数据异常检测 的工具和数据集列表。 所有列表均按字母顺序排列。在列表中，已维护的项目优先于未维护的项目。 如果最新提交超过 1 年，或作者明确说明，则该仓库被视为“未维护”。 🎓 如果您觉得这个合集有用并想引用它，请遵循引用政策。 异常检测软件 名称| 语言| 简介| 许可证| 维护状态 ---|---|---|---|--- Cuebook 的 CueObserve| Python3| 对 SQL 数据仓库和数据库进行异常检测。| Apache-2.0| ✔️ Yahoo 的 EGADS| Java| GADS...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

CVE-2024-51482

CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. ≤ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...

CVE-2025-22964

CVE-2025-22964: Time-based blind SQL injection in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 has a time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows...

cryptoquant-key-gen

CryptoQuant Breaker v1.6 — 2026 解锁 CryptoQuant 高级功能 | 高级分析与实时数据访问 描述 CryptoQuant Breaker 是一款功能强大的补丁工具，旨在绕过 CryptoQuant 的高级分析层级限制和实时数据限制。无限访问专业级链上分析、市场指标和实时加密货币数据流。 主要优势 ✅ 无限高级分析 — 访问 CryptoQuant 所有高级功能 ✅ 实时数据访问 — 实时市场数据无延迟、无限制 ✅ 专业层级解锁 — 完全访问机构级工具 ✅ 安装简便 — 基于 Python 的简单设置流程 ✅ 用户友好界面 — 简洁的 GUI，带进度...

mlkem-native

mlkem-native mlkem-native 是 ML-KEM1 的一个安全、快速且可移植的 C902 实现。它是 ML-KEM 参考实现3 的一个分支。 mlkem/src/ 和 mlkem/src/fips202/ 中的所有 C 代码均已通过 CBMC4 证明为内存安全（无内存溢出）和类型安全（无整数溢出）。所有 AArch64 和 x8664 汇编均已使用 HOL-Light5 证明其功能正确、内存安全且具有与秘密无关的时序（常数时间）。 mlkem-native 包含针对 Arm（64 位，Neon）、Intel/AMD（64 位，AVX2）、RISC-V（64 位，RVV...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

CVE-2019-9053-working-

CVE-2019-9053-working script- CMS Made Simple 2.2.10 - SQL Injection . Actual working version Updated the script to work with latest python versions Added Exception Handling for each function You can also calibrate time.sleep inside the exception handling blocks depending on response and connecti...

CVE-2025-68055-poc

CVE-2025-68055 Authenticated SQL injection in Hydra Booking Plugin get function, Hydra Booking hardcodes user input directly into the raw sql request instead of using prepare to sanitize input, leading to Time-Based Blind SQL injection. Exploit A simple run command as such will tell you whether o...

CVE-2026-5281

CVE-2026-5281 2026/06/27：This vulnerability has been publicly disclosed. Although the patch points differ, the overall approach and the triggering path are completely identical to those in my PoC. Chromium commit root@kitploit: commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71,...

CVE-2019-9053

CMS Made Simple Extracts data character by character by checking response delays. Extracts: Salt cmssiteprefs table Admin use...

mysqli

MySQLi.py - Time-Based Blind SQL Injection for MySQL MySQLi.py is a personal practice project, inspired by Exploit-DB exploit 46635, used during the SimpleCTF room on TryHackMe. What caught my attention in the original exploit was its ability to extract credentials and even crack the password has...