EUVD-2026-77023

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

EUVD-2026-77028

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90525

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-90526

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90526

CVE-2026-90526 is a SQL injection in SourceCodester School Registration and Fee System 1.0 , specifically in an unknown function of /bilal/save_class.php via the Category argument. The vulnerability is remotely exploitable over the network with no authentication required and low attack complexity...

CVE-2026-90526 SourceCodester School Registration and Fee System save_class.php sql injection

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90525

CVE-2026-90525 affects itsourcecode Sales and Inventory System 1.0 , where a SQL injection vulnerability exists in the file /pages/cust_pos_trans.php. By manipulating the firstname parameter, an unauthenticated remote attacker can inject SQL, leading to low impact on confidentiality, integrity, a...

CVE-2026-90525 itsourcecode Sales and Inventory System cust_pos_trans.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell — WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR — An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 es una herramienta de descubrimiento de subdominios que encuentra y resuelve subdominios válidos y luego realiza fuzzing de SSRF/LFI/SQLi, fuerza bruta y escaneo de puertos. Tiene...

CVE-2023-1454

CVE-2023-1454 jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

google-dorks-bug-bounty

Google Dorks para Bug Bounty Una lista de Google Dorks para Bug Bounty, Seguridad de Aplicaciones Web y Pentesting Herramienta en vivo Búsqueda amplia de dominio con búsqueda negativa root@kitploit: site:example.com -www -shop -share -ir -mfa Extensión PHP con parámetros root@kitploit:...

LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED Escáner y Exploit Magento El Escáner explora la vulnerabilidad SQLi Vulnerability 1.9.1.0 CE de Magento. La vulnerabilidad fue corregida en el Patch SUPEE-5344 , sin embargo, el escáner sirve para localizar y probar los sistemas que no aplicaron el parche de segurida...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

CVE-2024-8529

CVE-2024-8529 LearnPress – WordPress LMS Plugin = 4.2.7 - Inyección SQL no autenticada a través de 'cfields' Descripción El plugin LearnPress – WordPress LMS Plugin para WordPress es vulnerable a inyección SQL a través del parámetro 'cfields' del endpoint /wp-json/lp/v1/courses/archive-course de ...

MOVEit-Transfer-Data-Breach-Analysis.

MOVEit-Transfer-Data-Breach-Analysis. ​Detailed analysis of the 2023 MOVEit Transfer data breach CVE-2023-34362 for CS50 Cybersecurity. This project explores the technical impact of unauthenticated SQL Injection and its consequences for global data privacy, affecting 2,700+ organizations. Special...

CVE-2024-27956-RCE

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage root@kitploit: git clone...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wrapper for sqlmap designed to exploit CVE-2024-51428 in ZoneMinder. This tool automates detection and exploitation of a Blind SQL Injection vulnerability while keeping the output clean and focused on useful data. The script hides sqlmap...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...