Lucene search
+L

610 matches found

Kitploit
Kitploit
added 2026/08/26 6:09 a.m.1 views

CVE-2022-31061

CVE-2022-31061 PoC لـ GLPI CVE-2022-31061 إثبات مفهوم لـ GLPI = 9.3.0 و 10.0.2 - حقن SQL بدون مصادقة في صفحة تسجيل الدخول إخلاء مسؤولية قانوني : استخدام هذا السكريبت لمهاجمة هدف دون موافقة متبادلة غير قانوني. تقع على عاتق المستخدم النهائي مسؤولية الالتزام بجميع القوانين المعمول بها في مكانه. لا...

9.8CVSS8.9AI score0.50889EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/08/25 4:30 a.m.1 views

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — إثبات مفهوم PoC لثغرة حقن SQL الأعمى القائم على الوقت في WordPress REST API → تنفيذ أكواد عن بُعد RCE الوصف pocwptot.py هو إثبات مفهوم PoC لاستغلال ثغرة حقن SQL الأعمى القائم على الوقت time‑based blind SQL injection في نقطة نهاية الدُفعات batch الخاصة بـ WordPress REST API، وتنفيذ سلسل...

9.8CVSS9AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
added 2026/08/25 4:26 a.m.1 views

CVE-2019-10708

Scms - SQL Injection exploit.py هو دليل إثبات PoC لثغرة CVE-2019-10708، يستخدم معالجة متعددة multiprocessing للحقن، للحصول على أسماء قواعد البيانات وبيانات اعتماد مدير النظام الخلفية يوصى باستخدام إصدارات قبل 20190401. Usage root@kitploit: 測試是否可注入 python3 exploit.py http:localhost/js/scms.php...

9.8CVSS9.2AI score0.02638EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/24 5:51 p.m.2 views

TimeInjector

TimeInjector Time injector هي أداة استغلال لـ CVE-2018-14714 مكتوبة بلغة bash لتحديد ما إذا كان الهدف عرضة للخطر، يعمل السكربت أولاً بالتحقق من إمكانية الوصول إلى الهدف وما إذا كان يمكن إنشاء جلسة تسجيل دخول. بعد ذلك، يتحقق من وجود صفحات محددة ويقوم بحقن زمني لمعرفة ما إذا كان النظام عرضة لتنفيذ...

10CVSS9.5AI score0.27411EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/24 9:17 a.m.607 views

ghauri

Like Ghauri, consider supporting the developer...

5.4AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/21 3:24 p.m.1 views

CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Машина Hackthebox: CCTV Приложение: ZoneMinder Описание Выполнение множественных time-based blind-инъекций для одного и того же символа и выбор наиболее частого результата значительно снижает количество ошибок и повышает надёжность, хотя это занимает много времени...

9.9CVSS0.34979EPSS
SaveExploits8
NVD
NVD
added 2026/08/05 1:24 p.m.11 views

CVE-2026-71287

Cacti's sanitizesqlcolumn lib/functions.php sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore, parentheses, and dot intended to support expressions like COUNTid and table.column, a payload such as passes through completely...

8.8CVSS0.00306EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 12:26 p.m.9 views

CVE-2026-71288 Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

Koha's guided report builder reports/guidedreports.pl reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into an SQL ORDER BY clause with no allowlist or validation. Since ORDER BY columns cannot be bound via prepared-statement placeholders,...

8.8CVSS5.7AI score
SaveExploits0References4
CVE
CVE
added 2026/08/05 12:26 p.m.62 views

CVE-2026-71287

Cacti CVE-2026-71287 involves a flaw in sanitize_sql_column() in lib/functions.php. The function filters ORDER BY column names with preg_replace('/[^a-zA-Z0-9_().]/', '', $column), which leaves letters, digits, underscore, parentheses, and dot. This allows payloads like SLEEP(5) to pass unmodifie...

8.8CVSS5.2AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/01 9:16 a.m.11 views

CVE-2026-15018

The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

5.3CVSS0.00265EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/01 7:49 a.m.38 views

CVE-2026-15018 Database Collation Fix <= 1.2.10 - Unauthenticated SQL Injection via 'force-collation-algorithm' Parameter

The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

5.3CVSS0.00265EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/29 12:00 a.m.16 views

PT-2026-65700

A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable...

9.1CVSS5.9AI score0.00296EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/28 6:54 a.m.9 views

CVE-2026-15670

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.9.7 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS6AI score0.00259EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/28 5:39 a.m.18 views

EUVD-2026-49696

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient...

4.9CVSS6AI score0.00259EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/28 5:39 a.m.10 views

CVE-2026-16811

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient...

4.9CVSS6AI score0.00259EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/28 5:39 a.m.10 views

CVE-2026-6251

The Chaty Pro plugin for WordPress is vulnerable to Authenticated Time-Based Blind SQL Injection in versions up to and including 3.5.5. This is due to the fetchcustomfield function in admin/class-admin-base.php retrieving the widgetid POST parameter via filterinputINPUTPOST, ... and directly...

6.5CVSS6AI score0.00242EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/21 6:00 a.m.37 views

CVE-2026-8082

CVE-2026-8082 affects the bpost-shipping-platform WordPress plugin before 3.2.3. The issue is improper sanitization of a parameter used in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to perform time-based blind SQL injection on stores running this plugin. R...

7.5CVSS5.7AI score0.00445EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/07/21 12:00 a.m.72 views

📄 WordPress Exact Links 3.0.7 Unauthenticated Blind SQL Injection

WordPress Exact Links URL Shortener plugin version 3.0.7 contains an unauthenticated time-based blind SQL injection vulnerability through REST. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2026/07/21 12:00 a.m.72 views

📄 WordPress WP Directory Kit 1.4.3 Unauthenticated Blind SQL Injection

WordPress WP Directory Kit plugin version 1.4.3 contains an unauthenticated time-based blind SQL injection vulnerability. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit demonstrates the vulnerabl...

7.5CVSS5.8AI score0.01531EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2026/07/21 12:00 a.m.76 views

📄 WordPress WP Extended 3.0.12 Unauthenticated Blind SQL Injection

WordPress WP Extended plugin version 3.0.12 contains an unauthenticated time-based blind SQL injection vulnerability through X-Forwarded-For. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit...

7.5CVSS8.8AI score0.00537EPSS
SaveExploits1
Rows per page
Query Builder