Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL https://vulners.com/cve/CVE-2022-28452 https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28452 https://laundry.redplanetcomputers.com/ 1-Description: Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection via...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

blackbird

Blackbird Blackbirdは、600以上のプラットフォームでの高速なユーザー名・メールアドレス検索と、無料のAI搭載プロファイリングを組み合わせた強力なOSINTツールです。WhatsMyNameのようなコミュニティ主導のプロジェクトを活用することで、低い偽陽性率と高品質な結果を実現します。スマートフィルター、洗練されたPDF/CSVエクスポート、完全自動分析などの機能を、単一のCLIから利用できます。 セットアップ リポジトリをクローン root@kitploit: git clone https://github.com/p1ngul1n0/blackbird cd...

unve1ler

インターネット上のデジタルフットプリントと視覚的手がかりを明らかにする。 ユーザー名を使用してシームレスにプロフィールを特定し、便利な逆画像検索機能を提供するように設計されたソーシャルエンジニアリングツールです。 このツールは概念実証であり、教育目的のみで使用されます。...

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to...

linkedin2username

linkedin2username OSINT ツール: LinkedIn 上の企業からユーザー名リストを生成します。 これは純粋な Web スクレイパーであり、API キーは必要ありません。有効な LinkedIn のユーザー名とパスワードを使用してログインし、指定した企業の全従業員に対して考えられるユーザー名形式のリストを複数作成します。 作成されるものは以下の通りです: first.last.txt: Joe.Schmoe のようなユーザー名 f.last.txt: J.Schmoe のようなユーザー名 flast.txt: JSchmoe のようなユーザー名 firstl.txt...

Stalker

What's Stalker Very simple and probably badly written OSINT tool that will allow you to quickly search through several websites for a single username. It's aimed to save time and I wanted to keep it simple, so everything's in one single, messy .py file. I'll soon work on that to clean all of this...

CVE-2018-14699

CVE-2018-14699 UnAuth Command injection in the enableuser function of DroboAccess v2.1 Usage: To use First startup a listener ncat -nvlp 1337 Next run the exploit example: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='host for exploitation, ex...

CVE-2026-42568

CVE-2026-42568 — YAMCS LDAP Injection in LdapAuthModule Summary An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass...

CVE-2023-31719

CVE-2023-31719 Its possible do inject SQL code into the JSON parameter "username" from the endpoint /api/signin via HTTP POST request "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Name Affected product: FUXA Version affected: = 1.1....

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

GhostTrack

GhostTrack Useful tool to track location or mobile number, so this tool can be called osint or also information gathering New update : Version 2.2 Instalation on Linux deb root@kitploit: sudo apt-get install git sudo apt-get install python3 Instalation on Termux root@kitploit: pkg install git pkg...

CVE-2026-92405

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-80891

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405

SourceCodester Inventory and Monitoring System 1.0 is vulnerable to SQL injection via the Username argument in the file /index.php . The vulnerability is remotely exploitable without authentication or user interaction, with a CVSS 3.1 base score of 7.3 (High) reflecting low impact on confidential...

cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-35511 Description: Vulnerable to SQL Injection via 'username' parameter. Affect...