CVE-2020-2978
emad-almousa/cve-2020-2978Proof-of-concept exploit for CVE-2020-2978 targeting Oracle RMAN audit table point-in-time recovery bypass, enabling unauthorized database access.
database-securityexploitationinformation-gathering+2
emad-almousa/cve-2020-2978Proof-of-concept exploit for CVE-2020-2978 targeting Oracle RMAN audit table point-in-time recovery bypass, enabling unauthorized database access.
lisa-2905/cve-2024-56429Exploit for CVE-2024-56429 demonstrating extraction of Apache Derby database boot password from iLabClient source code, enabling local database…
mr-r00t11/cve-2024-34693An input validation vulnerability in Apache Superset allows an authenticated attacker to create a MariaDB connection with local_infile enabled,…
savagesanta11/reproduce-cve-2024-21513Demonstrates CVE-2024-21513 in langchain-experimental, showing arbitrary code execution via VectorSQLDatabaseChain's eval() on retrieved values.…
daeseong1209/cve-2024-31449Proof-of-concept exploit for CVE-2024-31449, a stack buffer overflow in Redis Lua engine via bit.tohex, enabling denial-of-service and potential…
thehermione/cve-2024-45265CVE-2024-45265
againstthelight/cve-2022-37204Proof-of-concept exploit for an authenticated SQL injection vulnerability in JFinal CMS 5.1.0, demonstrating information disclosure and potential…
l20170217b/cve-2024-51747Proof-of-concept exploit for CVE-2024-51747 enabling authenticated file read and deletion via SQLite database manipulation in a web application's…
geraldoalcantara/cve-2023-49970Customer Support System 1.0 - SQL Injection Vulnerability in the "subject" Parameter During "save_ticket" Operation
randomrobbiebf/cve-2024-55982Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
randomrobbiebf/cve-2024-12404CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
akhlak2511/cve-2024-50971Proof-of-concept for CVE-2024-50971, a SQL injection vulnerability in Itsourcecode Construction Management System 1.0, with exploitation steps and…
0xwhoami35/cve-2024-4879Exploit script for ServiceNow CVE-2024-4879 that enables unauthenticated remote code execution, with mass target scanning and database dumping…
charondefalt/wordpress--cve-2022-21661Proof-of-concept exploit for CVE-2022-21661, a SQL injection vulnerability in WordPress Core WP_Query, demonstrating the attack and providing…
emad-almousa/cve-2020-2969Proof-of-concept exploit for CVE-2020-2969 targeting unauthorized access to Oracle Database password hashes. Enables security researchers to test and…
dovankha/cve-2024-34226Proof-of-concept for SQL injection in SourceCodester Visitor Management System 1.0 via the id parameter, allowing arbitrary SQL command execution.
security-n/cve-2021-39378Proof-of-concept for CVE-2021-39378: SQL injection in openSIS 8.0 via the str parameter in NamesList.php, enabling database extraction and blind…
dovankha/cve-2024-35468Proof-of-concept exploit for SQL injection vulnerability in SourceCodester Human Resource Management System 1.0, enabling unauthenticated admin login…