CVE-2024-43917

CVE-2024-43917 This script demonstrates an SQL injection vulnerability found in the TI WooCommerce Wishlist plugin for WordPress, versions up to 2.8.2 CVE-2024-43917. The vulnerability allows unauthenticated users to execute arbitrary SQL commands on the website’s database, potentially exposing...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL Injection Exploit mTLS client certs from MacOS keychain version Go implementation of CVE-2024-43468 exploit that uses macOS Keychain for mTLS authentication without need to export keys from keychain. Additionally: Added proxy support to not use problematic proxychains. Add...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 ist eine SQL-Injection -Sicherheitslücke CWE-89 im Paket langgraph-checkpoint-sqlite Teil des LangGraph/LangChain-Ökosystems. Sie erlaubt einem Angreifer, beliebiges SQL über unsanitisierte Metadaten-Filterschlüssel...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description root@kitploit: Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode,...

CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - savedepartment Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL comman...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 未认证 SQL 注入 CVE-2025-59213 漏洞利用 此脚本利用 CVE-2025-59213 漏洞，该漏洞允许具有网络访问权限的未认证攻击者通过滥用 Discovery Data Manager DDM 的 DuplicateAMTMachineRecord 方法中的 SQL 注入缺陷，在站点数据库上执行任意 SQL 查询。在合并两个硬件 ID 冲突的客户端时，未转义的 HardwareID0 字段被不当处理。 当缺少 KB34503790 时，以下所有 Microsof...

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10547 info: nam...

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

Piwigo 13.7.0 - SQL Injection

Piwigo is open source photo gallery software. Prior to version 13.8.0, there is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header User-Agent is vulnerable at the endpoint that records user information when logging in to the...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

CVE-2024-50971

CVE-2024-50971 설명 Itsourcecode Construction Management System 1.0의 print.php에서 발생하는 SQL 삽입 취약점으로, 원격 공격자가 mapid 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. 취약점 유형 SQL Injection 공급업체 Itsourcecode 영향을 받는 제품 코드 베이스:...

CVE-2024-50972

CVE-2024-50972 描述 Itsourcecode Construction Management System 1.0 的 printtool.php 中存在 SQL 注入漏洞，允许远程攻击者通过 borrowid 参数执行任意 SQL 命令。 漏洞类型 SQL 注入 产品厂商 Itsourcecode 受影响产品代码库： https://itsourcecode.com/free-projects/php-project/construction-management-system-project-in-php-with-source-code/ - 1.0 受影响组件：...

CVE-2022-34265

CVE-2022-34265 Utilizzo avvio root@kitploit: docker-compose build docker-compose up -d arresto root@kitploit: docker-compose down Verifica PoC della vulnerabilità Django CVE-2022-34265 Una vulnerabilità CVE-2022-34265 in Django è stata divulgata il 5 luglio 2022 ora USA. Questo articolo descrive ...

CVE-2024-34222

Human Resource Management System 1.0 Segnalatore: Kha Do Vulnerabilità Iniezione SQL Descrizione La vulnerabilità di iniezione SQL in /hrm/country.php in SourceCodester Human Resource Management System 1.0 consente agli attaccanti di eseguire comandi SQL arbitrari tramite i parametri searccountry...

CVE-2024-51482

CVE-2024-51482 - Blind-SQL-Injection in ZoneMinder Inhaltsverzeichnis Überblick Schwachstellendetails Technische Analyse Exploit-Anleitung Installation Anwendungsbeispiele Gegenmaßnahmen Referenzen Überblick CVE-2024-51482 ist eine kritische boolesche SQL-Injection-Schwachstelle, die in ZoneMinde...

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - Una vulnerabilità di SQL Injection nel Computer Laboratory Management System v1.0 consente agli attaccanti di eseguire comandi SQL arbitrari...

django-cve-2025-64459

Django CVE-2025-64459 Questa applicazione illustra la CVE-2025-64459 che colpisce diverse versioni di Django. Questa vulnerabilità è stata corretta nelle versioni più recenti di Django. Iniezione SQL L'iniezione SQL avviene quando l'input fornito dall'utente viene trattato come parte di una query...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Descrizione : Multiple vulnerabilità SQL injection in /customersupport/ajax.php?action=saveticket nel Customer Support System 1.0 consentono ad attaccanti autenticati di eseguire comandi SQL arbitrari...

sparx_hack

Múltiplas vulnerabilidades no Sparx Pro Cloud Server e Enterprise Architect Código de exploit para executar comandos SQL arbitrários no servidor Sparx PCS sem autenticação. NOTA: a chave NÃO está correta para impedir que s|rIpt kIddi3 seja hackeado facilmente ;- Artigo completo:...