Tools

lukasz-rybak/cve-2026-25514

CVE-2026-25514 - FacturaScripts has SQL Injection in Autocomplete Actions

lukasz-rybak/cve-2025-65950

Proof-of-concept exploit for a critical time-based blind SQL injection vulnerability in WBCE CMS, enabling low-privileged users to execute arbitrary…

lukasz-rybak/cve-2026-24417

CVE-2026-24417 - OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service

saereya/cve-2025-14847---mongobleed

Go proof-of-concept exploit for CVE-2025-14847 (MongoBleed), a MongoDB memory disclosure vulnerability. Crafts malformed BSON documents to leak…

lukasz-rybak/cve-2025-68400

Technical disclosure of a critical time-based blind SQL injection vulnerability (CVE-2025-68400) in ChurchCRM, including vulnerable code analysis,…

lukasz-rybak/cve-2026-22243

CVE-2026-22243 - EGroupware has SQL Injection in Nextmatch Filter Processing

lukasz-rybak/cve-2025-69214

Proof-of-concept for CVE-2025-69214: SQL injection in OpenSTAManager's ajax_select.php componenti endpoint. Includes vulnerable code analysis,…

lukasz-rybak/cve-2025-69213

Proof-of-concept repository for CVE-2025-69213, demonstrating a SQL injection vulnerability in OpenSTAManager's ajax_complete.php endpoint with…

netw0rk7/cve-2019-9193-home-lab

This lab simulates CVE-2019-9193 - PostgreSQL COPY FROM PROGRAM RCE

lytianahkone-boop/cve-2025-25257

Reproducible Docker lab for CVE-2025-25257, demonstrating SQL injection bypass and data exfiltration via HTTP Authorization header on a simulated…

netw0rk7/cve-2012-2122-home-lab

CVE-2012-2122 MySQL Authentication Bypass Home Lab

sholls000/cve-2024-8465-poc

Intentionally vulnerable web application demonstrating SQL injection vulnerabilities (CVE-2024-8465) for educational purposes, including…

open-flaw/cve-2022-33171

CVE-2022-33171: TypeORM SQL Injection Vulnerability

rishi-kaul/cve-2025-14847-mongobleed

Analysis and remediation guide for CVE-2025-14847 (MongoBleed), a MongoDB zlib compression memory disclosure. Includes detection indicators,…

knqyf263/redis-exploitation

CONFIG SET

amir-othman/cve-2025-32429

Proof-of-Concept exploit for CVE-2025-32429 (SQL Injection in PHP PDO prepared statements) – for educational and security research purposes only

millad7/axelor-vulnerability-cve-2025-50341

Public advisory for CVE-2025-50341 in Axelor

nayankadamm/cve-2023-34233_proof_of_concept

Proof-of-concept demonstrating CVE-2025-24793 SQL injection vulnerability in Snowflake Connector for Python, with auto-detection of patched/unpatched…