CVE-2026-48842

CVE-2026-48842 PoC — Roundcube virtuserquery pre-auth SQLi Poc for CVE-2026-48842 , a pre-auth SQL injection in the optional virtuserquery plugin of Roundcube Webmail. The tool does two things and refuses to guess about either: 1. Confirms the injection with a true/false differential not a single...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 📖 Description This repository contains a high-performance, parallelized...

CVE-2026-59508

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0...

recox

Recox v2.0 RecoX es una herramienta increíblemente versátil y potente, diseñada específicamente para ayudar en la identificación y clasificación de vulnerabilidades en aplicaciones web. El script es capaz de detectar vulnerabilidades que no suelen estar incluidas en la lista de las diez...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc Prueba de concepto PoC de inyección SQL ciega basada en tiempo no autenticada para el endpoint VERMAJAXfunctions.php de VICIdial CVE-2024-8503. El proyecto está destinado únicamente a pruebas de seguridad autorizadas, validación y educación. Resumen...

CVE-2026-59508

The software Interuse i-Bos version 3.0 is vulnerable to an SQL injection vulnerability (CWE-89) caused by the improper neutralization of special elements used in SQL commands. The impact allows for a high level of confidentiality breach, although integrity and availability are not affected. No s...

EUVD-2026-97110

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Unauthenticated SQL Injection Description The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due...

CVE-2022-37209

CVE-2022-37209 CVE-2022-37209 POC Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

50-Days-Of-SQLi

50-Days-Of-SQLi Q. Why I am starting this? I have always struggled as a bug hunter. Whenever I read anything new I learn from it but hardly implement it. And because of that whenever I read anything now, it feels like I know it and so couldn't digest complete information that the writeup has to...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

CVE-2025-69215

CVE-2025-69215: OpenSTAManager has an SQL Injection in the Stampe Module Overview Field| Details ---|--- CVE ID| CVE-2025-69215 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: query'UPDATE zzprints SET predefined = 0 WHERE...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Fast network scanner for CVE-2025-64459 Django SQL Injection vulnerability. Installation pip install -r requirements.txt Usage Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t 192.168.1.0/24 Custom ports python...

CVE-2025-68400

CVE-2025-68400: ChurchCRM vulnerable to time-based blind SQL Injection in ConfirmReportEmail.php Overview Field| Details ---|--- CVE ID| CVE-2025-68400 Severity| CRITICAL Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products ChurchCRM/CRM Details Summary A critical SQL Injection...

CVE-2025-54554

CVE-2025-54554 CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure Discoverer: Amanpreet Parmar | Sr. Security Engineer @Harvard Medical School Summary: CVE-2025-54554 identifies a vulnerability in the tiaudit component of the ticrypt platform,...

pysqli

PySQLi - Framework de inyección SQL en Python 1. Descripción general PySQLi es un framework de Python diseñado para explotar vulnerabilidades complejas de inyección SQL. Proporciona bloques dedicados que pueden utilizarse para construir exploits avanzados o fácilmente extenderse/mejorarse para...

CVE-2024-27956

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released CVE-2024-27956. WordPress Admin Account Creation and Reverse Shell cve-2024-27956 Usage- sudo python3 cve.py...

Django-faille-CVE-2025-57833_test

Testing SQL Injection Vulnerability via Aliases in Django Definition: What is an alias? An alias is a name given to a column or aggregation result in an SQL query. In Django, aliases are used with the annotate or alias methods to name computed fields. Example: from django.db.models import Count...

CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Pre-Auth SQL Injection Found by msd0pe https://github.com/waqaskanju/Chitor-CMS Project by waqaskanju chitor1.1.py Patched since 69d3442 commit 2023/04/13 SQL Injection was found in the /editschool.php?id= endpoint and doesn't need any authentication. chitor1.0.p...

CVE-2023-45503

CVE-2023-45503 Vulnerability Details Overview In Macrob7 Macs Framework Content Management System CMS versions 1.1.4f and prior, insecure handling of user input leads to 16 SQL injection vulnerabilities. The ability to execute arbitrary SQL queries can lead to private data being leaked including...