WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection

WordPress Secure Copy Content Protection and Content Locking plugin before 2.8.2 contains a SQL injection vulnerability. The plugin does not escape the sccpid parameter of the ayssccpresultsexportfile AJAX action, available to both unauthenticated and authenticated users, before using it in a SQL...

LearnPress < 4.2.7.1 - SQL Injection

The LearnPress - WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'conlyfields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of...

VICIdial - SQL Injection

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database. id: CVE-2024-8503 info: name: VICIdial - SQL Injection author: s4e-io severity: critical description:...

CVE-2024-2876

CVE-2024-2876 Descrição da Vulnerabilidade: O plugin Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce para WordPress é vulnerável a SQL Injection através da função ‘run’ da classe ‘IGESSubscribersQuery’ em todas as versões até e incluindo...

CVE-2022-34265

CVE-2022-34265 PoC für CVE-2022-34265 Beschreibung In Django 3.2 vor 3.2.14 und 4.0 vor 4.0.6 wurde ein Problem entdeckt. Die Datenbankfunktionen Trunc und Extract sind anfällig für SQL-Injection, wenn nicht vertrauenswürdige Daten als Wert für kind/lookupname verwendet werden. Anwendungen, die d...

proteus

Proteus Proteus - Il database e l'API di axiom https://github.com/pry0cc/axiom. Originariamente, scritto per Costruire una piattaforma ASM usando gli strumenti ProjectDiscovery. Configurazione Per prima cosa, clona il repository root@kitploit: git clone https://github.com/pry0cc/proteus /.proteus...

Teamsniper

Teamsniper Teamsniper è uno strumento per recuperare parole chiave in Microsoft Teams come password, email, database, ecc.. Utilizzo Opzioni di Aiuto root@kitploit: usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams...

CVE-2021-21311

CVE-2021-21311 Descrizione SSRF Server-side Request Forgery in Adminer Strumento Open Source per la gestione di database dalla v4.0.0 v4.7.8 corretta in v4.7.9 Commit della patch Utilizzo root@kitploit: exploit.py -h -target TARGET -redirect REDIRECT -host HOST -port PORT options: -h, --help show...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py è uno script Python progettato per rilevare specifiche vulnerabilità nelle istanze ServiceNow e scaricare i dettagli di connessione al database se la vulnerabilità viene trovata. Questo strumento è particolarmente utile per ricercatori di sicurezza e penetration...

CVE-2023-23752-Docker

CVE-2023-23752 Vulnerabilità di accesso non autorizzato a Joomla CVE-2023-23752 in Docker Installazione Consigliato automatico 1. Clona questo repository git clone https://github.com/karthikuj/CVE-2023-23752-Docker.git 2. Entra nella directory cd CVE-2023-23752-Docker 3. Esegui ./setup.sh 4. Apri...

PoC-CVE-2025-66224

OrangeHRM RCE Exploit - CVE-2025-66224 📋 Beschreibung Dieses Proof of Concept PoC demonstriert eine Remote Code Execution RCE-Schwachstelle in OrangeHRM durch Befehlseinschleusung im Konfigurationsparameter sendmailpath. Der Exploit funktioniert wie folgt: 1. Injizieren einer schädlichen Nutzlast...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — Esecuzione SQL Arbitraria e SQLi in SiYuan CVE-2026-69084: Esecuzione SQL Arbitraria tramite /api/search/searchEmbedBlock CVE-2026-69085: SQL Injection tramite /api/filetree/searchDocs CVSS 9.9 Critico ciascuna · CWE-89 · SiYuan = v3.7.2 corretto in v3.7.3...

wifi-cracking

Wi-Fi Cracking Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords. It is not exhaustive, but it should be enough information for you to test your own...

EUVD-2026-67959

IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

PT-2026-83427

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

dbeaver

DBeaver Strumento database multipiattaforma gratuito per sviluppatori, programmatori SQL, amministratori di database e analisti. Ha molte funzionalità tra cui editor di schema, editor SQL, editor di dati, integrazione AI, diagrammi ER, esportazione/importazione/migrazione dei dati, piani di...

CVE-2026-3627

IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to SQL injection . A remote attacker with no prior authentication can send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. The vulnerability is rated CVSS 9.1 (CRITICAL) with a network attack v...