CVE-2019-9053-Exploit-Python-3

CVE-2019-9053 Exploit Python 3 Dieses Repository enthält einen Exploit für die Schwachstelle CVE-2019-9053, die in der CMS Made Simple CMSMS-Software gefunden wurde. Der Exploit wurde modifiziert, um mit Python 3 zu funktionieren und ist mit CMSMS Version 2.2.9 und darunter kompatibel. Beschreibu...

woo

Woocommerce 3.3 bis 5.5 - Nicht authentifizierte SQL-Injection https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 WooCommerce-SQLI ausnutzen und Benutzer- und Passwort-Hash abgreifen Befehle root@kitploit: usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h,...

CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit

Questo repository non contiene un README...

CVE-2019-9053-exploit

CVE-2019-9053 — SQL Injection non autenticata in CMS Made Simple Descrizione CVE-2019-9053 è una vulnerabilità di iniezione SQL time-based blind che colpisce CMS Made Simple nelle versioni ≤ 2.2.9. Non richiede autenticazione. Il parametro vulnerabile è m1idlist nel modulo News moduleinterface.ph...

CVE-2026-15162

The CVE-2026-15162 entry concerns the Object Sync for Salesforce WordPress plugin, where an unauthenticated SQL injection is possible via the wordpress_object_type parameter in the /wp-json/object-sync-for-salesforce/push/ REST route. The can_process() check only validates the HTTP method, not ca...

PT-2026-72143

Name of the Vulnerable Software and Affected Versions Object Sync for Salesforce versions prior to 2.2.14 Description An unauthenticated SQL Injection exists in the /wp-json/object-sync-for-salesforce/push/ REST endpoint. The issue occurs because the can process permission callback only verifies...

Exploit for CVE-2025-4396

CVE-2025-4396 - WordPress Relevanssi Time-Based Blind SQL Inje...

EUVD-2016-10294

Malware in sbrugna...

EUVD-2019-18490

Malware in sbrugna...

CVE-2023-27481 Extract password hashes through export querying in directus

Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the password field in directususers can extract the argon2 password hashes by brute forcing the export functionality combined with a startswith filter. This allow...

CVE-2018-15357

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...

Code injection

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...

IBM Lotus Domino R8 - Password Hash Extraction

Exploit Title: IBM Lotus Domino = R8 Password Hash Extraction Exploit Google Dork: inurl:names.nsf?opendatabase Date: 02-24-2016 Exploit Author: Jonathan Broche Contact: https://twitter.com/g0jhonny Vendor Homepage: https://www-01.ibm.com/software/lotus/category/messaging/ Tested on: Lotus Domino...

FLDS 1.2a Blind SQL Injection

FLDS 1.2a lpro.php id Blind SQL Injection Vulnerability + Discovered By SirGod + Greetz : All my friends + Blind SQL Injection - Get username : http://target/path/lpro.php?id=1 and asciisubstringSELECT username from users limit 0,1,1,196 Query is truepage loads normally.Going to next ascii char...