SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

Oracle E-Business Suite - Blind SSRF

Oracle E-Business Suite, Application Management Pack component User Monitoring subcomponent, is susceptible to blind server-side request forgery. An attacker with network access via HTTP can gain read access to a subset of data, connect to internal services like HTTP-enabled databases, or perform...

Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection

It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The updatelog function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected v...

isr-sqlget

-- ISR - Infobyte 安全研究 -- | ISR-sqlget | www.infobytesec.com | ..:: 描述 ISR-sqlget：一款用 Perl 开发的盲 SQL 注入工具。 它可以获取数据库模式和表行数据。 通过单个 GET/POST 请求，您可以悄无声息地访问数据库结构， 并通过单个 GET/POST 请求将每个表的所有行导出为 csv 格式文件。 支持的数据库： root@kitploit: - IBM DB2 - Microsoft SQL Server - Oracle - Postgres - Mysql - IBM Informix -...

CVE-2024-55981

CVE-2024-55981 Nabz Image Gallery = 5.0.12 AND time-based blind query SLEEP Payload: id=1 AND SELECT 6801 FROM SELECTSLEEP5ggHa...

CVE-2024-55972

CVE-2024-55972 eTemplates = 5.0.12 AND time-based blind query SLEEP Payload: id=1 AND SELECT 4484 FROM SELECTSLEEP5MYhT --- 12:46:25 INFO testing MySQL do you...

blind-ssrf-chains

Introducción ¿Qué es Server Side Request Forgery SSRF? Server Side Request Forgery ocurre cuando puedes obligar a un servidor a realizar solicitudes arbitrarias en tu nombre. Como las solicitudes las realiza el servidor, es posible acceder a recursos internos debido a la posición del servidor en ...

XSpear

XSpear XSpear is XSS Scanner on ruby gems !IMPORTANT XSpear Repository Archived This repository has been archived and is now read-only. XSpear is no longer actively maintained. Try Dalfox instead 🌙🦊 A faster, more powerful XSS scanner with advanced features. → https://github.com/hahwul/dalfox Key...

CVE-2025-28346

Vulnerability Type SQL Injection Description A Time-Based Blind SQL Injection vulnerability was discovered in Ticket-Booking-App - 1.0 that allows an attacker to execute arbitrary SQL queries on the underlying database. The vulnerable parameter does not properly sanitize user-supplied input,...

blind-sql-bitshifting

ビットシフトによるブラインドSQLインジェクション これは、ビットシフト方式を用いて文字を推測するのではなく計算する ことでブラインドSQLインジェクションを実行するモジュールです。設定に応じて、1文字あたり7〜8回のリクエストを必要とします。 使用方法 root@kitploit: import blind-sql-bitshifting as x 攻撃ベクターを設定するためにこの辞書を編集します x.options 設定例: root@kitploit: 脆弱なリンク x.options"target" = "http://www.example.com/index.php?id=1...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

CVE-2024-37791

CVE-2024-37791 CVE-2024-37791 Project address: Preparatory work: Log in to the backend - get cookie Vulnerability URL: http://127.0.0.1:8093/s/article/Content/index?classid=&keyword= Vulnerability parameter: keyword payload: %27andselectfromselect+ifasciisubstrdatabase,1,1%3E97,sleep1,0a//union/...

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC

CVE-2023-30258 — Magnus Billing v7 Command Injection PoC Unauthenticated command injection vulnerability in Magnus Billing v7.3.0. The democ GET parameter in icepay.php is passed directly to a shell function without sanitization, allowing arbitrary command execution as the web server user. The...

procrustes

Procrustes 一个 Bash 脚本，用于在拥有盲命令执行权限且除 DNS 外所有出站连接均被阻止的服务器上，通过 DNS 自动实现数据窃取。该脚本目前支持 sh、bash 和 powershell，并兼容 exec 类型的命令执行（例如 java.lang.Runtime.exec）。 非分段模式： 分段模式： 在运行过程中，脚本将用户希望在目标服务器上执行的命令作为输入，并根据目标 shell 类型对其进行转换，使其输出能够通过 DNS...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution CVSS 10.0 Critical | Blind RCE | FlowiseAI Flowise = 2.2.7-patch.1 and 3.0.6 Overview A critical remote code execution vulnerability in the CustomMCP node of FlowiseAI Flowise. The convertToValidJSONString function passes user-supplied...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...

dnsobserver

DNSObserver Goで書かれた便利なDNSサービスで、いくつかの種類のブラインド脆弱性の検出を支援します。ペンテスターのサーバーを監視してアウトオブバンドDNSインタラクションを検出し、受信したリクエストの詳細をSlack経由で通知します。DNSObserverは、ブラインドOSコマンドインジェクション、ブラインドSQLi、ブラインドXXEなどのバグを見つけるのに役立ちます！ 詳細な概要とセットアップ手順については、以下を参照してください： https://www.allysonomalley.com/2020/05/22/dnsobserver/ Setup 必要なもの：...

frevvomapexec

frevvomapexec frevvomapexec is a script to verify the existence of a blind SQL injection vulnerability by injecting a delay of your choosing in seconds in Square 9 GlobalForms 6.2. To verify the vulnerability is legitimate, the end user will be required to do math e.g. Subtracting the smaller...