CVE-2026-110181

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration time, while Anonymizer only attempts to check them at execution time. This problem can be exploited by any user with the...

AOSP-DownloadProviderDbDumper

AOSP-DownloadProviderDbDumper PoC Exploiting SQL Injection in Android's Download Provider CVE-2018-9493 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-SQL-Injection-CVE-2018-9493.pdf More Information...

ESAPI-SQLinjection-CVE-2025-5878-Exploit

Affected: ESAPI.encoder.encodeForSQL method and OracleCodec class Affected versions: 2.2.0.0-2.6.2.0 Usage: similar to sqlmap usage: esapi-sqlinjection.py -h -u URL -c COOKIE --dbs --tables --columns -D DB -T TABLE -C COLUMN --dump esapi-sqlinjection.py: error: the following arguments are require...

Maximo_Sql_Injection-CVE-2019-4650

This repository does not have a README...

CVE-2019-13027

CVE-2019-13027 Details for disclosing CVE-2019-13027 Vendor contact timeline: 1st July 2019 - No response, no email back. 4th July 2019 - No response, no email back. 8th July 2019 - Email sent, Github created. 11 July 2019 - No Vendor response. Vuln disclosed. Vulnerability Type SQL Injection...

CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection

7. CVE-2026-5432 – GraphQL Batching Alias Confusion SQL Injection Overview A GraphQL resolver constructs SQL queries dynamically from field aliases. By using batching and aliases, an attacker bypasses an allow‑list and injects SQL. Severity: Critical Database Takeover Node.js Server & Exploit //...

WordPress-XStore-theme-SQL-Injection

WordPress-XStore-theme-SQL-Injection CVE-2024-33559 XStore theme-SQL Injection CVE-2024-33551 is a SQL injection vulnerability found in 8theme XStore, an ecommerce platform built on WordPress. This vulnerability allows attackers to execute malicious SQL commands on the database, which can lead to...

CVE-2024-2879

CVE-2024-2879 Description LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the lsgetpopupmarkup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

mysql-set-role-leftover

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-set-role-leftover mysql-set-role-leftover Class: Privilege leftover FILE as mysqld UID; not OS LPE Reach: Remote MySQL Community Server mysqld 26.7.0 06a5c1c - Oracle SET ROLE ALL EXCEPT rfile or SET ROLE DEFAUL...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module...

CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modified Description This is a modified version of the time-based SQL injection exploit for CMS Made Simple = 2.2.9. The exploit was originally created by Daniele Scanu and has been updated for better compatibility and modern Python practices...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...

CVE-2026-54596

CVE-2026-54596 - Authenticated SQL Injection via recurringinvoicefrequency Parameter Enables Full Database Exfiltration Severity: High Advisory: GHSA-f9m3-qjc9-v27j Fixed in: Commit 7211426 Author: iltosec Summary An SQL injection vulnerability in ITFlow's recurring invoice creation endpoint allo...

CVE-2024-8275

CVE-2024-8275 CVE-2024-8275 is a critical SQL injection vulnerability discovered in the WordPress plugin The Events Calendar. This vulnerability affects versions up to and including 6.6.4. The issue arises from insufficient escaping of the 'order' parameter in the tribehasnextevent function...

vuln-bank

Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...

CVE-2018-8045

CVE-2018-8045 Joomla core SQL injection vulnerability principle and poc...

WP2Shell-Scanner

WP2Shell Scanner A command line tool that checks whether a WordPress site is exposed to WP2Shell CVE-2026-63030 and CVE-2026-60137. It reads the WordPress version and REST API surface over read-only requests and reports a verdict. It does not exploit anything. !WARNING For authorised testing only...

CVE-2024-9465

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection Proof of concept to exploit CVE-2024-9465 on vulnerable devices. Blog Post Root cause and indicators of compromise here: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Usage % python3...

teler-waf

teler-waf teler-waf is a comprehensive security solution for Go-based web applications. It acts as an HTTP middleware, providing an easy-to-use interface for integrating IDS functionality with teler IDS into existing Go applications. By using teler-waf, you can help protect against a variety of...