Lucene search
+L

283259 matches found

Kitploit
Kitploit
•added 2026/10/11 11:58 p.m.•32 views

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...

9.8CVSS6AI score0.02188EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/11 11:53 p.m.•18 views

CVE-2024-32640

CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept This Python script demonstrates a time-based blind SQL injection exploit for MySQL databases , specifically designed for CVE-2024-32640. It can be used to verify vulnerability in a target URL, and if the vulnerability exists, extract...

9.8CVSS8.1AI score0.77078EPSS
SaveExploits3
Cvelist
Cvelist
•added 2026/10/11 11:45 p.m.•40 views

CVE-2026-108778 erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection

A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr...

6.5CVSS0.00192EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/11 11:45 p.m.•17 views

CVE-2026-108778

The erzhongxmu JEEWMS software (up to version 2026.09.27-W39) contains a SQL injection vulnerability within the Inbound Quality Check Pda Interface component. Specifically, the WmInQmIController.list function in the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java fails to proper...

6.5CVSS6.3AI score0.00192EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 11:30 p.m.•23 views

CVE-2026-9082

CVE-2026-9082 / Drupal SA-CORE-2026-004 Proof of Concept Disclaimer: This Proof-of-Concept is for educational and research purposes only. Do not use this software against any system you do not own or have explicit permission to test. The author assumes no liability for misuse or damage caused by...

9.8CVSS8AI score0.15701EPSS
SaveExploits19
Cvelist
Cvelist
•added 2026/10/11 11:30 p.m.•40 views

CVE-2026-108777 erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. Th...

6.5CVSS0.00192EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/11 11:30 p.m.•17 views

CVE-2026-108777

A SQL injection vulnerability exists in erzhongxmu JEEWMS (versions up to 2026.09.27-W39). The flaw is located in the WvGiController.list function within the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. Manipulation of the searchstr argument allows for remote execution of th...

6.5CVSS6.3AI score0.00192EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 11:28 p.m.•18 views

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Vulnerability Type SQL Injection Vendor of Product Super Store Finder Affected Product Code...

9.8CVSS8.2AI score0.0099EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/11 11:25 p.m.•16 views

CVE-2024-51482

CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 poc.py By default, this script enumerates the zm database, pulls from the Users table, and dumps Username+Password columns. If these 4 things exist, you will receive a username and password hash. More detailed information on the...

9.9CVSS8.3AI score0.3661EPSS
SaveExploits9
NVD
NVD
•added 2026/10/11 11:16 p.m.•11 views

CVE-2026-108773

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely...

6.5CVSS0.00192EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 11:15 p.m.•12 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-Vulnerabilidad-de-Inyección-SQL-OOB Autor del exploit: ersinerenler Página del proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

5.5CVSS6.5AI score0.00349EPSS
SaveExploits2
Cvelist
Cvelist
•added 2026/10/11 11:15 p.m.•37 views

CVE-2026-108775 erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection...

6.5CVSS0.00303EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/11 11:15 p.m.•20 views

CVE-2026-108775

The erzhongxmu JEEWMS software (up to version 2026.09.27-W39 ) is vulnerable to SQL injection within the Search Endpoint component. The root cause is the improper handling of the searchstr argument in the WvNoticeController.list function located in com/zzjee/wmapi/controller/WvNoticeController.ja...

6.5CVSS6.2AI score0.00303EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 11:07 p.m.•16 views

CVE-2026-27876

CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write to RCE CVSS 9.1 Critical | Arbitrary File Write | Remote Code Execution Demo https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Summary Grafana's SQL Expressions feature sqlExpressions toggle uses an...

9.1CVSS8.8AI score0.01384EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/10/11 11:06 p.m.•9 views

CVE-2025-24799

CVE-2025-24799 - GLPI SQL Injection Exploit Exploit for unauthenticated SQL injection vulnerability in GLPI. Vulnerability Information Field| Value ---|--- CVE| CVE-2025-24799, CVE-2025-24801 Product| GLPI Asset Management Software Type| Unauthenticated SQL Injection Vulnerable Point|...

9.8CVSS6.8AI score0.86692EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/10/11 11:00 p.m.•15 views

CVE-2024-2876

CVE-2024-2876 - SQL Injection Vulnerability in Email Subscribers by Icegram Express Overview CVE-2024-2876 is a critical security vulnerability found in the "Email Subscribers by Icegram Express" plugin for WordPress. This vulnerability affects versions up to and including 5.7.14 and poses...

9.8CVSS8.6AI score0.80596EPSS
SaveExploits5
CVE
CVE
•added 2026/10/11 11:00 p.m.•22 views

CVE-2026-108774

A SQL injection vulnerability exists in erzhongxmu JEEWMS (up to version 2026.09.27-W39 ). The flaw is located within the getbinall and getbinallagv functions of the file src/main/java/com/zzjee/md/controller/MdBinController.java. An attacker can exploit this by manipulating the binstore/binid/de...

6.5CVSS6.4AI score0.00303EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/11 11:00 p.m.•37 views

CVE-2026-108774 erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...

6.5CVSS0.00303EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 10:59 p.m.•19 views

netgear-to-CVE-2022-29383

NETGEAR ProSafe SSL VPN CVE-2022-29383 to https://github.com/badboycxcc/Netgear-ssl-vpn-20211222-CVE-2022-29383 SQL injection vulnerability exists in scgi-bin/platform.cgi Firmware version: FVS318Gv2 and FVS318N FVS318Gv2 FVS318N...

9.8CVSS7.3AI score0.48537EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/10/11 10:45 p.m.•44 views

CVE-2026-108773 erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely...

6.5CVSS0.00192EPSS
SaveExploits0References4
Rows per page
Query Builder