sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

MSSQLand

✈️ MSSQLand Land gracefully in your target Microsoft SQL Server MS SQL DBMS, as if arriving on a business-class flight with a champagne glass in hand. 🥂 MSSQLand is a C Microsoft SQL Server MSSQL / MS SQL post-exploitation tool built for red team operators. Designed to run inside the target...

CVE-2026-59105

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

EUVD-2026-118266

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

CVE-2026-59105 Universal sysadmin credential vulnerability in Jumis

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2026-59105: Jumis Pro SIA Jumis: Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password…

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

CVE-2019-1068

CVE-2019-1068 Root cause analysis and PoC for a Microsoft SQL Server Stack Overflow Vulnerability by reversing “svl.dll”. Links to our work: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti

SQLi Vulnerability in TREX-MES-Applications CVE-2026-18782 Overview TREX MES is a commercial Manufacturing Execution System MES / Industry 4.0 platform used to collect and manage data from the production floor. The application's web API executes the client-supplied sql parameter directly on the...

CVE-2025-24999

CVE-2025-24999 proof of concept for CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Memory Corruption via SQL Injection A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...

CVE-2026-114119

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...

EUVD-2026-106922

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...

PT-2026-120245

Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Exploit for CVE-2026-51366

CVE-2026-51366 SQL Injection leading to Remote Code Execution...

EUVD-2026-101723

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query...