#1Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
Kitploit recommended

druid_decode
CVE-2024-22369 Reproducer

Proof-of-concept exploit for CVE-2026-40083, a SQL injection in Cacti managers.php allowing authenticated users to extract MySQL databases, user…

Toolkit for CVE-2025-55182, also known as React2Shell.

PoC for CVE-2021-2471 - XXE in MySQL Connector/J

MySQL DoS in the Procedure Analyse Function – CVE-2015-4870

CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the…

NodeJS + Postgres (Remote Code Execution) 🛰

Stirling-PDF v3.2.0 - Critical - Remote - H2 RUNSCRIPT leftover - CREATE OR REPLACE ALIAS import-database

Proof-of-concept exploit for CVE-2024-46981 targeting Redis 6.2.11, demonstrating a remote code execution vulnerability in the in-memory data store.

Proof-of-concept exploit for CVE-2023-1454, an unauthenticated SQL injection vulnerability in JeecgBoot v3.5.0, enabling database extraction and…

WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection

Interactive proof-of-concept demonstrating Django SQL injection (CVE-2021-35042) with step-by-step exploitation against SQLite and PostgreSQL…

SQLite 3.53.4 - High - Local - Info leak - WAL/DB page-size mismatch uninitialized page tail

A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection (CVE-2023-3163), most commonly occurs when SQL…

PostgreSQL Remote Code Executuon

Exploit for cve-2012-3137 Oracle challenge

Proof-of-concept for CVE-2026-32247, a Cypher injection in graphiti-core via unsanitized node_labels, demonstrating data exfiltration and graph…