CVE-2025-45346

CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreSQL Version Extraction 📝 Overview Vulnerability Title : Time-Based Blind SQL Injection in Bacula-Web Product : Bacula-Web Versions Affected : Confirmed in versions supporting PostgreSQL backend CVE ID : CVE-2025-45346 Severity : High...

CVE-2025-4396

CVE-2025-4396 - WordPress Relevanssi Time-Based Blind SQL Injection Toolkit Overview This repository contains a practical research and validation toolkit for CVE-2025-4396 , an unauthenticated Time-Based Blind SQL Injection affecting the WordPress Relevanssi plugin through the cats parameter. The...

CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Hackthebox Machine: CCTV Application: ZoneMinder Description Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, though it is time-consuming...

jit

jitpass - just-in-time passwords Just-in-time credentials for your dev machine. Documentation · Quickstart · Supported tools · Command reference · Security Status: macOS-only Apple Silicon, and still in development. What jit is 30 seconds Your secrets live in plaintext all over your machine: .env...

CVE-2024-0566

CVE-2024-0566 Smart Manager 8.27.0 - Post-Authenticated SQL Injection Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link:...

CVE-2019-10708

Scms - Inyección SQL exploit.py es un PoC para la vulnerabilidad CVE-2019-10708, implementa multiprocessing para inyección, obtiene nombres de base de datos y credenciales de administrador del backend se recomienda la versión anterior al 20190401 Uso root@kitploit: 測試是否可注入 python3 exploit.py...

CVE-2025-5287

CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-5287 , targeting a vulnerability in the WordPress Likes and Dislikes Plugin ≤ 1.0.0. The vulnerability allows...

CVE-2026-90776

Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC 5322 comments. Attackers can craft malicious email headers with comment-separated atoms to consume excessive CPU and block the Node.js...

CVE-2026-90776

Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC 5322 comments. Attackers can craft malicious email headers with comment-separated atoms to consume excessive CPU and block the Node.js...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wrapper for sqlmap designed to exploit CVE-2024-51428 in ZoneMinder. This tool automates detection and exploitation of a Blind SQL Injection vulnerability while keeping the output clean and focused on useful data. The script hides sqlmap...

CVE-2026-90776

Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC 5322 comments. Attackers can craft malicious email headers with comment-separated atoms to consume excessive CPU and block the Node.js...

Merlion

Merlion: A Machine Learning Library for Time Series Table of Contents 1. Introduction 2. Comparison with Related Libraries 3. Installation 4. Documentation 5. Getting Started 1. Anomaly Detection 2. Forecasting 6. Evaluation and Benchmarking 7. Technical Report and Citing Merlion Introduction...

CVE-2025-50383

CVE-2025-50383 Description A low-privileged authenticated user can exploit this vulnerability by sending a crafted HTTP POST request with a malicious orderby parameter e.g., orderby=IF1=1,SLEEP5,1. This can trigger time-based blind SQL injection, resulting in unauthorized SQL execution on the...

awesome-TS-anomaly-detection

awesome-TS-anomaly-detection List of tools & datasets for anomaly detection on time-series data. All lists are in alphabetical order. In the lists, maintaned projects are prioritized vs not mantained. A repository is considered "not maintained" if the latest commit is 1 year old, or explicitly...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

CVE-2024-51482

CVE-2024-51482 — Inyección SQL Ciega Basada en Tiempo en ZoneMinder Un exploit de prueba de concepto para CVE-2024-51482 , una vulnerabilidad de inyección SQL ciega basada en tiempo autenticada en ZoneMinder v1.37. ≤ 1.37.64. El script extrae nombres de usuario y hashes de contraseñas de la tabla...

cryptoquant-key-gen

CryptoQuant Breaker v1.6 — 2026 Unlock CryptoQuant Premium Features | Advanced Analytics & Real-Time Data Access Description CryptoQuant Breaker is a powerful patcher utility designed to bypass CryptoQuant's advanced analytics tier restrictions and real-time data limits. Get unlimited access to...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C901 implementation of ML-KEM2. It is a fork of the ML-KEM reference implementation3. All C code in mlkem/src/ and mlkem/src/fips202/ is proved memory-safe no memory overflow and type-safe no integer overflow using CBMC4. All AArch64 and...

CVE-2019-9053

CVE-2019-9053 エクスプロイト - CMS Made Simple 未認証SQLインジェクション SQLi CVE-2019-9053 用のエクスプロイトスクリプトです。これは、CMS Made Simple バージョン 2.2.9 以下 における深刻な 未認証SQLインジェクション SQLi 脆弱性です。このツールは、時間ベースのSQLインジェクション を利用して、脆弱な CMS Made Simple サイトから 管理者認証情報 （ユーザー名、メールアドレス、パスワードハッシュ、ソルト）を抽出します。また、ワードリストを使用した任意の パスワードクラッキング...

CVE-2026-16482

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...