Tools

ianxtianxt/dbscanner

未授权访问+弱口令批量检测

adarshthakur14777-cyber/cve-2026-60137

wpsqli full SQLi extractor + dumper for CVE-2026-60137

ridhinva/drupal-jsonapi-sqli-scanner

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV)

bridgeralderson/cve-2024-51482

ZenoMinder Blind SQL Injection PoC

mbadanoiu/cve-2024-34693

CVE-2024-34693: Server Arbitrary File Read in Apache Superset

ianxtianxt/mongodb-redis-scan

mongodb-redis匿名扫描脚本，支持mongodb和redis的匿名扫描

sakthivel10q/cve-2025-14847

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked…

fantasy-fql/esapi-sqlinjection-cve-2025-5878-exploit

针对ESAPI 的ESAPI.encoder().encodeForSQL()方法，OracleCodec对象的sql 时间盲注利用

iltosec/cve-2026-54596

CVE-2026-54596 - Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration

romain-deperne/cve-2026-41490

SQL Injection in Dagster database I/O managers via dynamic partition keys (DuckDB/Snowflake/BigQuery/DeltaLake) — High

sahiloj/cve-2023-31702

CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281.

xiaoxiaoranxxx/cve-2025-70828

Datart v1.0.0-rc.3 JDBC Connection String Injection Leading to Arbitrary File Read

joshuavanderpoll/cve-2025-14847

CVE-2025-14847 (MongoBleed)

randomrobbiebf/cve-2024-9796

WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection

gobysec/cve-2023-1454

jeecg-boot unauthorized SQL Injection Vulnerability (CVE-2023-1454)

0xblackash/cve-2026-9082

CVE-2026-9082

watchdog1337/cve-2024-42327_zabbix_sqli

POC for CVE-2024-42327, an authenticated SQL Injection in Zabbix through the user.get API Method