ffuf

ffuf - Fuzz Faster U Fool Un fuzzer web rápido escrito en Go. Instalación Ejemplo de uso Descubrimiento de contenido Descubrimiento de vhost Fuzzing de parámetros Fuzzing de datos POST Uso de mutador externo Archivos de configuración Ayuda Modo interactivo Instalación Descarga un binario...

CVE-2024-51442

Description CVE-2024-51442 is a command injection vulnerability in minidlna/Readyshare version %d; need to recreate...\n", ret, DBVERSION; sqlite3closedb; snprintfcmd, sizeofcmd, "rm -rf %s/files.db %s/artcache", dbpath, dbpath; if systemcmd != 0 DPRINTFEFATAL, LGENERAL, "Failed to clean old file...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi Vendor Description: The vulnerability page is admin.php http://you ip/HMS/admin.php Hospital-Management-System v1.0 The adminname parameter in the admin.php page appears to be vulnerable to SQL injection attacks. +sqlmap: python3 sqlmap.py -r Your post...

Jenkins-CVE-2024-23897-

Use the command:python 3 CVE-2024-23897 . py-l 2 . txt-f/etc/passwdWrite the URL into 2.txt to enable batch processing...

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

CVE-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability In admin.php, the moduleaddtosite function iterates through the entire $POST array, splits the user-controllable parameter names using explode'|', ... and directly concatenates them into data/settings/themes//moduleconf.php. This file will subsequentl...

CVE-2023-39361

Cacti graphview.php SQL Injection Leads to RCE CVE-2023-39361 WHS 3rd - Nam Gichan7342 ChoDeokCheol Summary A vulnerability exists in the growrightpanetree function of the graphview.php file in Cacti 1.2.24. When the action parameter is set to treecontent, the user-supplied rfilter parameter is...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...

CVE-2019-10685

CVE-2019-10685 La entrada proporcionada por el usuario que contiene JavaScript se refleja en código JavaScript en una respuesta HTML a través del parámetro "TextField". Publicación de Exploit-DB en https://www.exploit-db.com/exploits/46804 Publicación de PacketStorm en...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 White Hat 3rd Cohort Class 30 Kim Jeong-woo github link - https://github.com/custiya/geoserver-CVE-2023-25157 Vulnerability Summary CVE-2023-25157 is an SQLi vulnerability that occurred in GeoServer, an open-source map data service web application. Occurs in some versions...

CVE-2024-34471

CVE-2024-34471 Description: An authenticated user can abuse a Path Traversal vulnerability resulting in file deletion if has write permissions in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an...

CVE-2025-65950

CVE-2025-65950: WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups Parameter Overview Field| Details ---|--- CVE ID| CVE-2025-65950 Severity| CRITICAL Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A critical SQL Injection...

CVE-2022-46169

CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...

exploit_CVE-2023-33831

exploitCVE-2023-33831 CVE-2023-33831 Installation git clone https://github.com/btar1gan/exploitCVE-2023-33831 Usage automatic cd exploitCVE-2023-33831/ set your listener python3 33831.py manual nc -lvnp 1881 set your listener on code param copy the 33831.txt to repeater...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - SQL Injection Vulnerability in the "email" Parameter During "savestaff" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

CVE-2023-31717

CVE-2023-31717 It is possible to do SQL Injection into the HTTP POST id parameter passed in the body as json, being able to extract confidential information from the SQLite database Payload - "id":"n7c734712-aabf4eb3' AND 2630=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2 AND...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 📖 Description This repository contains a high-performance, parallelized...

CVE-2020-9758

CVE-2020-9758 Description An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from...