262149 matches found
sqli-hunter-CVE-2024-51482-PoC
sqli-hunter-CVE-2024-51482-PoC Python scripts for exploiting CVE-2024-51482 SQLi in ZoneMinder โ HTB CCTV sqli-hunter โ CVE-2024-51482 Description This script automates the extraction of databases, tables, columns, and credentials by exploiting CVE-2024-51482, a Boolean-based SQL Injection...
CVE-2026-25746_SqlInjectionVulnerabilityOpenEMR7.0.4
CVE-2026-25746 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...
CVE-2025-10351-POC
CVE-2025-10351 POC - SQL Injection Exploit ๐ POC for CVE-2025-10351: An unauthenticated SQL Injection vulnerability that affects a specific endpoint in Melis Platform Framework. ๐ References ๐ CVE-2025-10351 on MITRE ๐ Melis Platform Warning on INCIBE Spanish National Cybersecurity Institute ๐...
CVE-2024-36039_PoC
CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...
CVE-2026-33917_SqlInjectionVulnerabilityOpenEMR8.0.0
CVE-2026-33917 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...
whitewidow
Preamble Firstly readthis if you want Whitewidow development to continue. Hello all you whitewidow fans out there I say that with good intentions I promise!. It's me Ekultek, I'm just here to give you a little inside on what's going on with the whitewidow development team and what's happening wit...
Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection
CVE-2025-25257 Detection Engineering Repository Overview This repository provides production-ready detection engineering content for CVE-2025-25257 , a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead...
CVE-2026-22243
CVE-2026-22243: EGroupware has SQL Injection in Nextmatch Filter Processing Overview Field| Details ---|--- CVE ID| CVE-2026-22243 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products egroupware/egroupware versions: = 26.0.20251208, 26.0.20260113 CWE Classification...
Joomla-JCK-Editor-6.4.4-SQL-Injection
Joomla-JCK-Editor-6.4.4-SQL-Injection The JCK Editor Jtreelink plugin for Joomla! fails to correctly parse the user inputs, allowing SQL Injection. This exploit takes advantage of this security flaw and dump the administrators credentials and possibly upload a PHP RCE shell. Exploit Title: Joomla...
CVE-2022-34265
CVE-2022-34265 Usage start docker-compose build docker-compose up -d stop docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion of this vulnerability and the...
CVE-2025-61246
CVE-2025-61246 - SQL Injection Vulnerability in Online Shopping System Overview This repository contains a Proof of Concept PoC for CVE-2025-61246 , a critical SQL Injection vulnerability discovered in the Online Shopping System PHP application. The vulnerability allows an unauthenticated attacke...
FreePBX-Multiple-CVEs-2025
FreePBX-Multiple-CVEs-2025 This repository documents three security vulnerabilities discovered in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, including analysis, impact, and proof-of-concept details for security research and awareness purposes. Description CVEs ๐ด CVE-2025-61675 A...
CVE-2025-14598
CVE-2025-14598 CVSS: 9.8 Remote Unauthenticated SQL Injection leading to Remote Code Execution. Executive Summary A SQL Injection vulnerability was identified in the login functionality of BET e-Portal, a software solution widely deployed across educational institutions for student information an...
CVE-2024-58290-Xhibiter-SQLi
CVE-2024-58290-Xhibiter-SQLi Proof of Concept PoC for SQL Injection in Xhibiter NFT Marketplace 1.10.2 Collections Endpoint. Discovered by Sohel Yousef. CVE-2024-58290: Xhibiter NFT Marketplace SQL Injection Exploit Title: Xhibiter NFT Marketplace 1.10.2 - SQL Injection Unauthenticated Date:...
CVE-2025-66947
CVE-2025-66947 Time Based Blind SQL Injection in krishanmuraiji SMS v1.0 โฑ๏ธ Visual comparison: normal response vs 6s delayed response ๐ Summary TL;DR: A GET parameter in an admin module allows time-based SQL injection via response delays. A ๐ง๐ถ๐บ๐ฒ ๐ฏ๐ฎ๐๐ฒ๐ฑ ๐ฏ๐น๐ถ๐ป๐ฑ ๐ฆ๐ค๐ ๐ถ๐ป๐ท๐ฒ๐ฐ๐๐ถ๐ผ๐ป ๐๐๐น๐ป๐ฒ๐ฟ๐ฎ๐ฏ๐ถ๐น๐ถ๐๐ exists in...
CVE-2023-36645
== Affected Software %hardbreaks Vendor: ITB-GmbH Affected Products: TradePro v9.5 Component: Function Customer; Action oordershow Confirmed: yes == Attack Vector %hardbreaks Type: SQLi Access-Type: Remote Impact: Information Disclosure; Escalation of Privileges SQL injection in function customer...
CVE-2025-6970
CVE-2025-6970 Events Manager = 7.0.3 - Unauthenticated SQL Injection via orderby Parameter Description The Events Manager โ Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the โorderbyโ parameter in all versions up to, and including, 7.0.3...
CVE-2025-14124
CVE-2025-14124 WordPress Team Plugin - Unauthenticated SQL Injection Author: Hyun Chiya Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-14124 Plugin| WordPress Team Plugin Affected Versions| esclike $this-s's' ; // โ ๏ธ esclike only escapes %, , \ $where .= "OR $wpdb-posts.posttitle...
CVE-2025-24799
CVE-2025-24799 Auto Exploit โก Overview CVE-2025-24799 is a proof-of-concept PoC exploit targeting GLPI. This exploit demonstrates unauthenticated SQL Injection time-based blind to extract user credentials. Disclaimer: This PoC is for educational purposes only. Do not use on systems without...