CVE-2026-105158: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

CVE-2026-54596

CVE-2026-54596 - Authenticated SQL Injection via recurringinvoicefrequency Parameter Enables Full Database Exfiltration Severity: High Advisory: GHSA-f9m3-qjc9-v27j Fixed in: Commit 7211426 Author: iltosec Summary An SQL injection vulnerability in ITFlow's recurring invoice creation endpoint allo...

CVE-2026-88854

CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python 3 PoC scanner/exploit for CVE-2026-88854 in OrdaSoft OS Responsive Image Gallery for Joomla. | ---|--- Component| comosgallery, comosgallerylight Affected| 1.0.0 – 6.2.6 Fixed in| 6.2.7+ CVSS 4.0| 9.3 Critical Auth| None public...

CVE-2023-23752

CVE-2023-23752 — Joomla! ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details How It Work...

advisory-database

Base de datos de avisos de empaquetado de Python Este es un repositorio propiedad de la comunidad que contiene avisos para paquetes publicados en https://pypi.org. Los avisos se encuentran en el directorio vulns y utilizan una codificación YAML de un formato simple. Contribuir con avisos Realizar...

CVE-2022-24706

CVE-2022-24706 Contributors White Hat School 4th Batch 39th Class Geum Jeong-hyeon@junghyeonkum CouchDB Erlang Distribution Remote Command Execution Vulnerability CVE-2022-24706 Summary Apache CouchDB is an open-source document-oriented NoSQL database implemented in Erlang. Because Apache CouchDB...

CVE-2024-56429

CVE-2024-56429 Access to the local database of the iLabClient Extract database password The iLabClient uses an Apache Derby database to store the locally required data. To ensure the encryption, a bootPassword is used for the creation, which can be extracted from the source code the extracted cod...

CVE-2019-3396_Confluence

CVE-2019-3396Confluence Toda la documentación está en archivo de script. Este exploit también es parte de la base de datos de exploits Exploit Database mantenida por Offensive Security. Capturas de pantalla...

cve-2021-29442-Nacos-Derby-rce-exp

Introduction Nacos Derby command execution vulnerability exploitation script, by default uses User-Agent bypass to exploit the vulnerability Nacos is an open-source platform for service registration, discovery, and configuration management. In its early versions ≤2.4.0-BETA, Nacos integrates Apac...

MSSQL-Analysis-Coerce

MSSQL Analysis Services - Autenticación Forzada Una técnica para obligar a un Windows SQL Server a autenticarse en una máquina arbitraria. Esta prueba de concepto está coescrita por: Podalirius: Worty: Prueba de concepto Para provocar la autenticación como cuenta de máquina local, necesitamos...

Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

-Ruby-dl-handle.c-CVE-2009-5147-

Ruby Advisory Database The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries. You can check your own Gemfile.locks against this database by using bundler-audit. Support Ruby security! Do you know about a vulnerability that isn't...

HTB-Devvortex-CVE-2023-2375-PoC

Joomla! CVE-2023-23752 - PoC de Divulgación de Información no Autenticada Descripción Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2023-23752, una vulnerabilidad en Joomla! que permite la divulgación de información no autenticada. Esta vulnerabilidad puede exponer...

CVE-2024-13488

CVE-2024-13488 LTL Freight Quotes – Estes Edition = 3.3.7 - Inyección SQL no autenticada Descripción El plugin LTL Freight Quotes – Estes Edition para WordPress es vulnerable a Inyección SQL a través de los parámetros 'dropshipeditid' y 'editid' en todas las versiones hasta la 3.3.7 inclusive,...

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...

cve-2023-27372

education purpose only!!!!!...

NVD-Database

This repository does not have a README...

chusa

chusa: 注射 Chusa - 注射 es una herramienta de pruebas de penetración de código abierto basada en SQLmap que automatiza el proceso de detección y explotación de fallos de inyección SQL y la toma de control de servidores de bases de datos. Viene con un potente motor de detección, muchas funciones...

CVE-2021-42392-exploit-lab

⚠️ PoC de Exploit RCE en Base de Datos H2 CVE-2021-42392 Este repositorio proporciona un entorno mínimo y controlado para probar la vulnerabilidad de Ejecución Remota de Código en la Base de Datos H2 CVE-2021-42392 utilizando la función CREATE ALIAS. A diferencia de muchas demostraciones, este...