#1Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
Kitploit recommended

Rogue-MySql-Server
Python PoC and Docker lab for CVE-2026-22599, an authenticated SQL injection in Strapi's Content-Type Builder write API via Knex raw defaultTo.

CVE-2019-5893 | OpenSource ERP application has SQL Injection vulnerability.

CVE-2024-34693: Server Arbitrary File Read in Apache Superset

CVE-2026-79752 disclosure pack for CakePHP 5.2.13 SQL injection via FunctionsBuilder::cast, with a Python PoC script and Docker lab for authorized…

🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no…

PoC of SQL Injection vul(CVE-2020-9483,Apache SkyWalking)

phpMyAdmin 5.2.3 - High - Remote - SQLi - auth plugin identifier unquoted

CakePHP 5.4.2 - High - Remote - SQLi - COLLATE collation is a raw SQL fragment

phpMyAdmin 5.2.3 - High - Remote - SQLi - Designer JSON unsanitized identifiers

SQLite 3.53.4 - High - Local - Crash - FTS5 secure-delete PutVarint footer overrun

CVE-2026-1337 - Neo4j - Log Injection

SQLite 3.53.4 - High - Local - UAF - rtree last_insert_rowid 0 node hash

Proof-of-concept code and technical write-up demonstrating CVE-2025-53051, an Oracle 26ai histogram dictionary vulnerability exploitable through a…

SQLite 3.53.4 - High - Local - heap OOB write - session changeset same-name nCol growth

Moodle 5.2.3 - High - Remote - SQLi - enrol_database concatenates course idnumber into SQL

MySQL Community Server 26.7.0 - High - mysqldump --tab path leftover - client file write

SQLite 3.53.4 - High - Local - Privilege leftover - FULL JOIN USING skips sqlite3AuthRead