Database Security

joakimbulow/cve-2026-34308

Proof-of-concept for CVE-2026-34308, a MySQL Server JSON component denial-of-service vulnerability. Demonstrates stack exhaustion via deep $ref…

xmyronn/cve-2026-7394-sqli

Proof-of-concept exploit for CVE-2026-7394, a SQL injection vulnerability in SourceCodester Pizzafy Ecommerce System 1.0. Demonstrates authenticated…

oscerd/cve-2026-46591

Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization…

nicolasjulian/bouncer-overflow

Working POC of CVE-2026-6664 written by Sonnet 4.6

br0xpl/sparx_hack

Exploit code for CVE-2026-42096 and CVE-2026-42097 allowing for arbitrary SQL command execution without authentication.

bwithe/cve-2024-51482

CVE-2024-51482 ZoneMinder v1.37.* <= 1.37.64 poc

akucybersec/cve-2017-8917-joomla-370-sql-injection

Exploit for CVE-2017-8917, a SQL injection vulnerability in Joomla 3.7.0, allowing remote attackers to execute arbitrary SQL queries.

stvm8/cve-2026-2005_lab

Self-contained Docker lab for practicing exploitation of CVE-2026-2005, a heap buffer overflow in PostgreSQL's pgcrypto extension, enabling privilege…

forklit/cve-2026-36826

genesisQL-sqli-CVE-2026-36826

giangdurian/cve-2023-25157-geoserver-sqli-lab

Docker-based vulnerable lab and detailed PoC report for CVE-2023-25157/25158 SQL injection in GeoServer & GeoTools, with 4 verified attack vectors…

nma-io/mongobleed

golang test tool for mongobleed (cve-2025-14847)

loic-houchi/django-faille-cve-2025-57833_test

Educational proof-of-concept demonstrating SQL injection via dynamic aliases in Django's annotate() and alias() methods (CVE-2025-57833). Includes…

microwaveabi/pharmacy-sqli-cve-2026-7392

SourceCodester Pharmacy Sales and Inventory System 1.0 - Vulnerable source code for CVE-2026-7392 SQL Injection

het-kalariya/cve-2026-20253

Self-contained security training lab reproducing CVE-2026-20253 (Splunk Enterprise unauthenticated RCE). Provides a Docker-based environment to…

n0bitaemon/cve-2026-26980-poc

Ghost CMS Content API Blind SQL Injection

hann1bl3l3ct3r/cve-2026-11349

Modern Events Calendar Lite <= 7.33.0 — Unauthenticated SQL Injection

joshualent/django-cve-2025-64459

demo application showing off SQL Injection exploit in django 5.2.7