CVE-2025-57819-poc

CVE-2025-57819 — FreePBX SQLi no autenticada → RCE Exploit de un solo disparo para la inyección SQL no autenticada del Endpoint Manager de FreePBX CVE-2025-57819, encadenada a ejecución remota de código mediante la tabla cronjobs de FreePBX. Solo para pruebas de seguridad autorizadas / uso en CTF...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

ghauri

Like Ghauri, consider supporting the developer...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE mediante inyección SQL La vulnerabilidad de inyección SQL en BigAnt Messenger provoca una vulnerabilidad RCE. Siga los pasos para explotarla. Uso: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit...

CVE-2025-57819

CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE Unauthenticated stacked SQL injection in the FreePBX Endpoint Manager module admin/ajax.php, brand parameter, CVE-2025-57819, affecting FreePBX framework --vhost --root --cmd How it works 1. Confirm the SQL injectio...

CVE-2019-13027

CVE-2019-13027 Detalles para divulgar CVE-2019-13027 Cronología de contacto con el proveedor: 1 de julio de 2019 - Sin respuesta, ningún correo de vuelta. 4 de julio de 2019 - Sin respuesta, ningún correo de vuelta. 8 de julio de 2019 - Correo enviado, Github creado. 11 de julio de 2019 - Sin...

CVE-2026-72550-poc

CVE-2026-72550 — Inyección SQL no autenticada en Friendica La inyección SQL de consultas apiladas no autenticada en el endpoint de fotos de Friendica permite que cualquier visitante ejecute SQL arbitrario. Campo| Valor ---|--- CVE ID| CVE-2026-72550 Producto| Friendica red social federada...

CVE-2026-41462

🚨 CVE-2026-41462 - Inyección SQL no autenticada en ProjeQtor Inyección SQL crítica no autenticada en ProjeQtor ≤ 12.4.3 📌 Resumen CVE-2026-41462 es una vulnerabilidad crítica de inyección SQL no autenticada en la funcionalidad de inicio de sesión de la herramienta de gestión de proyectos ProjeQto...

CVE-2026-77051

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...

EUVD-2026-77459

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...

CVE-2026-77051 Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...

CVE-2026-77051

Apache Syncope is vulnerable to an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. An administrator with adequate entitlements can execute arbitrary SQL via stacked queries by leveraging unsanitized entityKey and opEvent parameters. This issue ...

CVE-2026-77051 Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...

CVE-2026-82232

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apach...

CVE-2026-82232 Apache Syncope: SQL injection via sort parameter in Task search

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apach...

CVE-2026-82232

Apache Syncope is vulnerable to an SQL injection flaw caused by the improper neutralization of special elements in SQL commands. Specifically, an administrator with adequate entitlements can execute arbitrary SQL via stacked queries by leveraging unsanitized sort clauses during a Task search . Th...

CVE-2026-82232 Apache Syncope: SQL injection via sort parameter in Task search

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apach...

EUVD-2026-77378

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apach...

PT-2026-91196

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects...

PT-2026-91149

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apach...