CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Hackthebox Machine: CCTV Application: ZoneMinder Description Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, though it is time-consuming...

CVE-2024-51482

CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 poc.py By default, this script enumerates the zm database, pulls from the Users table, and dumps Username+Password columns. If these 4 things exist, you will receive a username and password hash. More detailed information on the...

CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Pre-Auth SQL Injection Found by msd0pe https://github.com/waqaskanju/Chitor-CMS Project by waqaskanju chitor1.1.py Patched since 69d3442 commit 2023/04/13 SQL Injection was found in the /editschool.php?id= endpoint and doesn't need any authentication. chitor1.0.p...

CVE-2025-50383

CVE-2025-50383 Description A low-privileged authenticated user can exploit this vulnerability by sending a crafted HTTP POST request with a malicious orderby parameter e.g., orderby=IF1=1,SLEEP5,1. This can trigger time-based blind SQL injection, resulting in unauthorized SQL execution on the...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...

CVE-2025-69215

CVE-2025-69215: OpenSTAManager has an SQL Injection in the Stampe Module Overview Field| Details ---|--- CVE ID| CVE-2025-69215 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: query'UPDATE zzprints SET predefined = 0 WHERE...

CVE-2025-4396

CVE-2025-4396 - WordPress Relevanssi Time-Based Blind SQL Injection Toolkit Overview This repository contains a practical research and validation toolkit for CVE-2025-4396 , an unauthenticated Time-Based Blind SQL Injection affecting the WordPress Relevanssi plugin through the cats parameter. The...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: python code.py file.php -this will scan one file...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Fast network scanner for CVE-2025-64459 Django SQL Injection vulnerability. Installation pip install -r requirements.txt Usage Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t 192.168.1.0/24 Custom ports python...

sqlipy

sqlipy SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. SQLMap comes with a RESTful based server that will execute SQLMap scans. This plugin can start the API for you or connect to an already running API to perform a scan. Requirements Jython 2.7 up to 2.7.2 D...

CVE-2025-57529

CPAS-bug CPAS audit management information system has SQL injection vulnerability Beijing YouDataSum Technology Co., Ltd. domain: http://youdatasum.com info CVE-ID: CVE-2025-57529 affected version: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum,...

Exploit-CVE-2025-24799

Exploit-CVE-2025-24799 CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection Installation git clone https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799 cd Exploit-CVE-2025-24799 pip3 install -r requirements.txt python3 exploit.py -h Join in Rootkit Researchers...

Django-faille-CVE-2025-57833_test

Testing SQL Injection Vulnerability via Aliases in Django Definition: What is an alias? An alias is a name given to a column or aggregation result in an SQL query. In Django, aliases are used with the annotate or alias methods to name computed fields. Example: from django.db.models import Count...

MOVEit-Transfer-Data-Breach-Analysis.

MOVEit-Transfer-Data-Breach-Analysis. ​Detailed analysis of the 2023 MOVEit Transfer data breach CVE-2023-34362 for CS50 Cybersecurity. This project explores the technical impact of unauthenticated SQL Injection and its consequences for global data privacy, affecting 2,700+ organizations. Special...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

Blinder

Blinder Blidner is a small python library to automate time-based blind SQL injection by using a pre defined queries as a functions to automate a rapid PoC development. Installation You can install Blinder using the following command: pip install blinder Or by downloading the source and importing ...

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2...

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3...

CVE-2026-114577

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomerid/paymenttype/amount/description/user/uploadimage/fullname/visano results in sql...

WP2Shell-Scanner

WP2Shell Scanner A command line tool that checks whether a WordPress site is exposed to WP2Shell CVE-2026-63030 and CVE-2026-60137. It reads the WordPress version and REST API surface over read-only requests and reports a verdict. It does not exploit anything. !WARNING For authorised testing only...