sql-global-injector

Ultimate-Dork rastreador web y escáner de vulnerabilidad de inyección SQL Uso e Instalación - Installation apt-get install python python3 git git clone https://github.com/nu11secur1ty/sql-global-injector.git python3 -m pip install requests mechanicalsoup cd sql-global-injector - Usage python3...

CVE-2022-28346

CVE-2022-28346 A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely. Table of Contents CVE-2022-28346 Description Environment Proof of Concept and...

wp2shell

wp2shell — RCE pre-autenticación en el núcleo de WordPress PoC de RCE no autenticado en el núcleo de WordPress que encadena CVE-2026-63030 + CVE-2026-60137. Solo pruebas autorizadas. wp2shell.py es una prueba de concepto de un solo archivo que usa únicamente la biblioteca estándar y encadena dos...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL injection batch scanning poc Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Tool Usage python3 CVE-2023-1454-scan.py -u...

CVE-2024-2876

CVE-2024-2876 - SQL Injection Vulnerability in Email Subscribers by Icegram Express Overview CVE-2024-2876 is a critical security vulnerability found in the "Email Subscribers by Icegram Express" plugin for WordPress. This vulnerability affects versions up to and including 5.7.14 and poses...

CVE-2022-27414

CVE-2022-27414 - SQL-Injection College Website CMS v1.0 - CVE-2022-27414 - SQL Injection CVE url https://vulners.com/cve/CVE-2022-27414 PoC below Vulnerable Code starts from line 9 in "cwms\departments\index.php" query"SELECT FROM departmentlist where deleteflag = 0 and status = 1 order by name...

Final-project-SQL-injection-pipeline

Detección de Inyección SQL — Pipelines Híbridos de ML Código fuente para la tesis de MSc: Mejora del Firewall de Aplicaciones Web con Aprendizaje Automático para la Detección de Inyección SQL | ---|--- Autor| Lilliane Linnet Musoke Institución| Universidad de Reading, Departamento de Ciencias de ...

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - 未认证的任意SQL执行导致远程代码执行 CVE-2024-43918 WordPress的WBW Product Table Pro插件在版本1.9.4及之前的所有版本中，由于对一个函数缺失功能权限检查，容易受到未授权的任意SQL执行攻击。这使得未认证的攻击者能够执行任意SQL查询，从而窃取敏感数据或获得对易受影响站点的提升访问权限。 如需更多WordPress漏洞利用及独家漏洞，请通过Telegram联系我 @KtN1990。 使用 运行此漏洞利用程序需要安装python 3，并准备一个网站列表，然后执...

CVE-2022-31101

CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi CVE-2022-31101 Usage python3 cve-2022-31101.py Give the url to the wishlist when prompted. Example of a url: http://example.com/module/blockwishlist/view?idwishlist=1 Give the cookies for your account when prompted. Now it will...

OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

CVE-2022-30512

CVE-2022-30512 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30512 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

CVE-2025-30921

CVE-2025-30921 1️⃣ Tipo de componente Plugin de WordPress 2️⃣ Detalles del componente Nombre del componente Newsletters Versión vulnerable = 4.9.9.7 Slug del componente newsletters-lite Enlace del componente https://wordpress.org/plugins/newsletters-lite/ 3️⃣ OWASP 2017: TOP 10 Clase de...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

CVE-2026-105920

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2024-8309

Proof of Concept for Langchain CVE-2024–8309 Vulnerability Overview This setup demonstrates a proof of concept for the prompt injection vulnerability in the GraphCypherQAChain class that allows SQL injection in a Neo4j database. Components: 1. Neo4j Database : Runs Neo4j. 2. Backend FastAPI :...

CVE-2026-105921

A SQL injection vulnerability exists in the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2) within an unknown function of the search_class.php file. The flaw is triggered by manipulating the school_year argument and can be launched remotely . While ...

EUVD-2026-93423

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

nex-forms_SQL-Injection-CVE-2023-2114

NEX-Forms SQL注入 CVE-2023-2114 https://vulners.com/cve/CVE-2023-2114 https://wpscan.com/vulnerability/3d8ab3a5-1bf8-4216-91fa-e89541e5c43d 关于WordPress NEX-Forms插件中SQL注入的快速审查 上传的漏洞利用 注意，这个上传的漏洞利用代码并非专门针对此漏洞……但这只是一个示例，说明如何为此问题制作漏洞利用。 受影响版本 从8.3版本（可能更早）到8.4版本 SQL注入本身...