CVE-2024-51482

CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 poc.py By default, this script enumerates the zm database, pulls from the Users table, and dumps Username+Password columns. If these 4 things exist, you will receive a username and password hash. More detailed information on the...

CVE-2024-51482

CVE-2024-51482 - ZoneMinder Blind SQL Injection Table of Contents Overview Vulnerability Details Technical Analysis Exploitation Guide Installation Usage Examples Mitigation References Overview CVE-2024-51482 is a critical boolean-based SQL Injection vulnerability discovered in ZoneMinder, a...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

CVE-2026-27886-PoC-Account-Takeover

CVE-2026-27886 Automated Exploit - Usage Guide What This Script Does Automates the full account takeover chain in 4 HTTP request groups: 1. Vulnerability Verification - Confirms the target is vulnerable 2. Email Enumeration - Extracts admin email via boolean oracle 500 requests 3. Password Reset...

CVE-2025-65354

CVE-2025-65354 — SQL Injection Vulnerability Summary An SQL Injection vulnerability exists in the PuneethReddyHC event-management application version 1.0 due to improper input handling. Vulnerability Type SQL Injection Affected Component Endpoint: /Grocery/searchproductsitname.php Parameter:...

CVE-2026-37149

CVE-2026-37149 SQL Injection in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Overview CVE ID: CVE-2026-37149 Vulnerability Type: SQL Injection CWE-89 Severity: High Discoverer: Dhyey Patel Description GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0...

ministore-sqli-ctf

MiniStore — SQL Injection CTF Lab ⚠️ TUYÊN BỐ GIÁO DỤC /...

CVE-2025-41373

CVE-2025-41373 – SQL Injection in Gandia Integra Total Author: Byte Reaper CVE: CVE-2025-41373 Vulnerability: Authenticated SQL Injection Affected Path: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= Description: This endpoint concatenates the idestudio parameter...

CVE-2025-2812

CVE-2025-2812 — SQL Injection Vulnerability in "Bilet Satış Otomasyonu" by Mydata Bilişim Ltd. Şti 📌 CVE-ID: CVE-2025-2812 📢 USOM Announcement: tr-25-0099 🛡️ Vulnerability Type: CWE-89 - SQL Injection Boolean-based Blind 🏢 Affected Product: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti 🌐 Exampl...

cve-2026-5147-exp

cve-2026-5147 Exploitation Script For authorized vulnerability validation and lab practice: performs MySQL boolean-based blind injection EXP / INSTR or ASCII and time-based blind injection if + ascii + sleep against SQL injection endpoints, with optional extraction of version, database name,...

Axelor-vulnerability-CVE-2025-50341

CVE-2025-50341: Sql Injection on Axelor CVE ID: CVE-2025-50341 Reporter: Milad Seddigh Product: Axelor Affected Versions: v5.2.4 Impact: Sql Injection → exfiltrating database content. Summary A Boolean-based SQL injection vulnerability was discovered in the “domain” parameter of the Axelor. An...

ZoneMinder CVE-2024-51482 removetag SQLi

CVE-2024-51482 ZoneMinder = 1.37.64: boolean SQLi in ajax/event.php removetag tid parameter HTTP 200=true, 500=false. Extracts credentials. !/usr/bin/env python3 -- coding: utf-8 -- """ZoneMinder CVE-2024-51482 authenticated boolean-blind SQLi.""" from future import annotations import re from...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

Exploit for SQL Injection in Openproject

CVE-2026-34717 — Boolean-based Blind SQLi Exploit Mô tả S...

OpenProject 17.2.2 Boolean-based Blind SQL Injection

OpenProject versions prior to 17.2.3 contain an SQL injection vulnerability in the Cost Reporting =n operator. This proof of concept uses boolean-based blind SQL injection to extract data through a Cost Report request. https://packetstorm.news/download/237275...

CVE-2026-112017 JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...

CVE-2026-112017 JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like...

CVE-2026-112017

The JeecgBoot framework (versions before 3.9.5 ) is vulnerable to an SQL Injection flaw within the SqlInjectionUtil component. The root cause is a newline bypass that allows authenticated attackers to circumvent the keyword blocklist by inserting newline characters into dictionary and online repo...

acroform (>=0.1.2, <=0.1.3), bookbinder (0.1.0) +96 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.41.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 - ebook-reader 0.1.1 - epub-reader 0.1.1 and more Source cves: unknown CVE Source advisory: GHSA-6FJ4-RCR3-R7RR...

acroform (>=0.1.2, <=0.1.3), bookbinder (0.1.0) +96 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.41.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 - ebook-reader 0.1.1 - epub-reader 0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6FJ4-RCR3-R7RR...