CVE-2023-47460

CVE-2023-47460 Description SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component Vulnerability Type SQL Injection Vendor of Product Knovos Discovery Affected Product...

CVE-2024-1071

CVE-2024-1071 CVE-2024-1071 Ultimate Member Unauthorized Database Access / SQLi PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2023-23279

SQL injection in Canteen Management System v1.0. Bug author: Tuannq Discovered Day: 5/1/2023 Vendors: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login account: [email protected]/rootadmin Super Admin account Vulnerability File:...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105856

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthenticated SQL Injection in CMS Made Simple Description CVE-2019-9053 is a time-based blind SQL injection vulnerability affecting CMS Made Simple versions ≤ 2.2.9. It does not require authentication. The vulnerable parameter is m1idlist in the News module moduleinterface.php...

SQLbit

Herramienta de Inyección SQL Ciega Una herramienta para inyecciones SQL ciegas que utiliza comparaciones bit a bit multihilo para encontrar valores de celdas en tablas SQL. Funciona al menos con SQLite y soporta cookies. Es capaz de: Buscar valores de celdas por columnas en una tabla Buscar conte...

CVE-2022-30511

CVE-2022-30511 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30511 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...

loxs-optimized

loxs-optimized Project from https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Note: It mainly bypasses the CSP payload 2024-11-06 Add CSP-Bypass-xss.txt to xss.txt 2024-11-07 Removing interfering information Only the vulnerable information is displayed 2024-11-11 Solves the problem that the...

G0BurpSQLmaPI

Kousei こうせい Author: nu11secur1ty Years: 2023–2026 Language: Python with optional Go modules Purpose: Generate SQLi Proof-of-Concept requests, automate sqlmap attacks, and manage attack modules with ease. Description Kousei こうせい is an aggressive framework for sqlmap that can work with any web...

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — EverShop Second-Order SQL Injection Lab Prerequisites Docker Engine 24+ with Docker Compose v2+ 2 GB free RAM Deploy cd EverShop-Lab/ docker compose up Wait 2 minutes for first build clones EverShop v2.1.0, compiles, runs migrations, seeds data. App will be available at...

cve-2025-1323

cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational use only. Do not use against systems without explicit permission. Misuse may be illegal. ✅ Requirements Python 3.x requests module Install dependencies: pip instal...

reports

This folder contains some vulnerability reports I have disclosed over time. Barracuda Networks Load Balancer ADC - Multiple vulnerabilities CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - Stored XSS CVE-2015-1389 Network Solution WebMail - Multiple vulnerabilities Responsible...

vucsa

Aplicación Cliente-Servidor Vulnerable VuCSA La aplicación cliente-servidor vulnerable VuCSA está diseñada para aprender/presentar cómo realizar pruebas de penetración en aplicaciones cliente-servidor que no son HTTP. Está escrita en Java con interfaz gráfica JavaFX. Actualmente, la aplicación...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

CVE-2026-105856

The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...

CVE-2026-105856 Payload: SQL injection in SQLite/Postgres

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

EUVD-2026-93500

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...

opendcim-exploit

openDCIM - SQLi to RCE via Config Poisoning Remote code execution chain targeting openDCIM's install.php LDAP configuration form. Built on the VulnCheck go-exploit framework. Vulnerability Chain | CVE| CWE| Description ---|---|---|--- 1| CVE-2026-28515| CWE-862| install.php performs no role check...

CVE-2026-105845

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite...