sccm_sql_backdoor

sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. $ git clone...

CVE-2026-72898

Metabase SQL Injection RCE Unauthenticated SQL injection in Metabase /api/session/resetpassword endpoint. Creates admin accounts and extracts database credentials. Affected : v58.0 - v63.3 | Patched : v58.24+, v59.21+, v60.17+, v61.11+, v62.9+, v63.5+ Quick Start pip install flask requests python...

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX Cyber Range Isolated educational cyber-range for CVE-2025-57819 CWE-89, CWE-288. Original FreePBX-compatible training application — not official Sangoma FreePBX. Quick start git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...

CVE-2024-9796

CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - Unauthenticated SQL Injection Description The PoC SQL injection will dump WordPress users and hashes. Disclaimer: This script is for educational use only. Do not use it for illegal purposes. If you do, it’s entirely your responsibility; I am not liable f...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Code‑Projects Hotel & Tourism Reservation 1.0 SQL Injection Exploit -orange -red Fully featured, multi‑threaded, time‑based blind SQL injection exploit for CVE‑2026‑14762. Targets the /admin/rooms.php endpoint of the Code‑Projects Hotel & Tourism Reservation application version...

drupal-jsonapi-sqli-scanner

CVE-2026-9082 — Drupal PostgreSQL SQL Injection Mass Scanner & Exploitation Tool Unauthenticated SQL Injection in Drupal Core PostgreSQL JSON:API filter array key injection via PDO placeholder name abuse Overview CVE-2026-9082 is a Highly Critical SQL injection vulnerability in Drupal Core...

wp2shell-rce

WP2Shell RCE An assessment and scanning utility designed to detect exposure to the WP2Shell exploit chain in WordPress Core installations across single endpoints or large target lists. ⚠️ Disclaimer Only scan systems you own or are authorized to assess. Unsanctioned scanning or testing of...

Appsmith-1.98-Stored-XSS-Exploit

CVE-2026-7299 - Appsmith 1.98 Stored XSS SQL Autocomplete innerHTML Sink Automated exploit for a stored cross-site scripting vulnerability in Appsmith's SQL query editor. A workspace Developer can inject arbitrary JavaScript via database table names that execute in any other workspace member's...

CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details Component name ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Vulnerable version = 1.4.8 Component slug elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Component link...

Geoserver-CVE-2023-25157

Geoserver SQL Injection Exploit In this year, a cve got published for Geoserver with the ID CVE-2023-25157. I saw this vulnerability in one of my projects and tried to exploit it. And here it is, the complete exploit. In this repohttps://github.com/0x2458bughunt/CVE-2023-25157 you can use the...

CVE-2021-43609-POC

Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle install Stage 1...

nex-forms_SQL-Injection-CVE-2023-2114

nex-formsSQL-Injection CVE-2023-2114 https://vulners.com/cve/CVE-2023-2114 https://wpscan.com/vulnerability/3d8ab3a5-1bf8-4216-91fa-e89541e5c43d Quick Review about the SQL-Injection in the NEX-Forms Plugin for WordPress Uploaded exploit Note that this uploaded exploit code isnt for this particula...

CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injection ★ CVE-2026-0603 Hibernate SQL Injection PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Overview CVE-2026-0603 is a Second-Order SQL Injection vulnerability in Hibernate ORM , a widely used Ja...

sql-global-injector

Ultimate-Dork web crawler And Scan SQL injection vulnerability Usage & Installation - Installation apt-get install python python3 git git clone https://github.com/nu11secur1ty/sql-global-injector.git python3 -m pip install requests mechanicalsoup cd sql-global-injector - Usage python3...

CVE-2025-57833

Django FilteredRelation Alias SQL Injection Vulnerability CVE-2025-57833 A SQL injection vulnerability in Django that emerged after about a year, at first glance it appears to be caused by an alias since aliases cannot be precompiled. This vulnerability affects the FilteredRelation feature in the...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

CVE-2026-34220

CVE-2026-43220 MikroORM SQL Injection ★ CVE-2026-43220 MikroORM SQL Injection PoC ★ https://github.com/user-attachments/assets/33724cfc-6151-47ff-9415-2f50c5124cd1 Overview CVE-2026-43220 is a SQL Injection vulnerability in MikroORM , a widely used TypeScript/Node.js ORM framework. When a...

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: Metabase Setup Endpoint SQLi Patch This repository contains the hotfix for CVE-2026-72898 , an unauthenticated SQL Injection vulnerability in the setup endpoint of self-hosted Metabase instances. Left unpatched, attackers can bypass the setup token validation, execute arbitrary...

CVE-2021-25076

CVE-2021-25076-Exploit Wordpress Plugin WP User Frontend 3.5.26 - SQL-Injection Authenticated CVE description: The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL...

CVE-2025-25257

CVE-2025-25257 - FortiWeb Pre-Auth SQL Injection to RCE 07/09/2025 by TheStingR Disclaimer: This proof-of-concept PoC is provided for authorized security testing and research purposes only. Unauthorized use against systems you do not own or have explicit permission to test is illegal. Users are...