Lucene search
+L

50 matches found

Kitploit
Kitploit
•added 2026/09/24 10:37 p.m.•15 views

sqlmap-ai

SQLMap AI Assistant An AI-powered wrapper around SQLMap that makes SQL injection testing more accessible and automated. Features Core Features AI-Assisted Testing - Intelligent vulnerability analysis and recommendations Adaptive Testing - Step-by-step testing that adapts to target responses...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 2:54 p.m.•9 views

CVE-2019-9053-Exploit-Python-3

CVE-2019-9053 Exploit Python 3 This repository contains an exploit for the vulnerability CVE-2019-9053 found in the CMS Made Simple CMSMS software. The exploit has been modified to work with Python 3 and is compatible with CMSMS version 2.2.9 and below. Description CVE-2019-9053 is a Time-Based...

8.1CVSS7.5AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit
•added 2026/09/22 2:44 a.m.•11 views

atutor-blind-sqli

ATutor v2.2.1 Blind SQL Injection Exploiting CVE-2016-2555 enumerating and dumping the underlying Database. Disclaimer All the information provided in this post is for educational purposes only. You shall not misuse the information to gain unauthorized access and/or write malicious programs. The...

9.8CVSS8.4AI score0.79622EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/20 6:32 a.m.•9 views

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Advanced PostgreSQL SQL Injection Exploitation Tool 🚨 DISCLAIMER FOR AUTHORIZED SECURITY TESTING ONLY Unauthorized use is illegal. Use only on systems you own or have explicit permission to test. ⚡ QUICK START Install & Run root@kitploit: git clone...

9.8CVSS8.6AI score0.20171EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/19 2:27 a.m.•8 views

EUVD-2026-83470

The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including, 5.8.1 via the dnxtegetdatabasetables and dnxtegetdatabasedata AJAX actions. The handlers only conditionally verify a nonce the check runs solely when the 'nonce' POST paramete...

6.5CVSS5.6AI score0.00221EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/10 8:59 a.m.•24 views

CVE-2026-10731

SQL injection in the ‘twostepsauthcode’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication 2FA functionality can be accessed without prior authentication, allowing unauthenticated attackers to execute arbitrary SQL queri...

9.3CVSS6AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•29 views

Nemon Trade Energy和Nemon Trade Energy CRM SQL注入漏洞

Nemon Trade Energy and Nemon Trade Energy CRM are both products of the Spanish company Nemon. Nemon Trade Energy is a platform for managing energy retail businesses. Nemon Trade Energy CRM is a platform for managing energy customer relationships. Both Nemon Trade Energy and Nemon Trade Energy CRM...

9.3CVSS6.3AI score0.00349EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/04/14 4:06 p.m.•173 views

portswigger-sqlinjection-labs

🔐 SQL Injection Attack Lab – PortSwigger Web Security Academy...

6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/03/10 8:12 a.m.•232 views

Exploit for Allocation of Resources Without Limits or Throttling in Espressif Esp-Idf

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wr...

7.5CVSS5.9AI score0.00531EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/11/10 5:22 a.m.•11 views

CVE-2025-64492

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 8.9.0 and below contain a time-based blind SQL Injection vulnerability. This vulnerability allows an authenticated attacker to infer data from the database by measuring response times,...

8.8CVSS7.8AI score0.00343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/22 5:18 p.m.•17 views

CVE-2025-56450

Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...

6.5CVSS8.3AI score0.00337EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2025/10/22 12:00 a.m.•174 views

📄 Log2Space Subscriber Management Software 1.1 SQL Injection

Log2Space Subscriber Management Software version 1.1 suffers from an unauthenticated remote SQL injection vulnerability. Author: Aditya Patil [email protected] Rohan Patil [email protected] CVE-2025-56450 Unauthenticated SQL Injection in Log2Space Subscriber Management Software...

6.5CVSS8.3AI score0.00337EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-3791

Malware in sbrugna...

4.3CVSS4.9AI score0.00945EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-43899

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00608EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/09/14 4:54 p.m.•456 views

sqlmap-ctt

sqlmap-CTT ========== sqlmap-CTT is an advanced SQL injection t...

8.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/22 12:22 a.m.•28 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS8.7AI score0.00829EPSS
SaveExploits2References1
NVD
NVD
•added 2025/08/20 5:15 p.m.•14 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS0.00829EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•15 views

PT-2025-34122 · Unknown · Online Artwork/Fine Arts Mca Project

Name of the Vulnerable Software and Affected Versions: Online Artwork and Fine Arts MCA Project version 1.0 Description: A SQL injection vulnerability exists in the id2 parameter of the cancel booking.php page. A remote attacker can inject arbitrary SQL queries, leading to database enumeration an...

9.8CVSS7.8AI score0.00829EPSS
SaveExploits2References8
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•13 views

Online Artwork and Fine Arts 安全漏洞

Online Artwork and Fine Arts is an online artwork display box selling project by the individual developer Vishal Mathur. A security vulnerability exists in Online Artwork and Fine Arts version 1.0, which stems from a SQL injection in the id2 parameter of the cancelbooking.php page, which could le...

9.8CVSS8.4AI score0.00829EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•8 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

8.8AI score0.00829EPSS
SaveExploits2References4
Rows per page
Query Builder