CVE-2021-27928
al1ex/cve-2021-27928CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞
command-and-controldatabase-securityexploitation+3
al1ex/cve-2021-27928CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞
jas502n/redis-rceremote code execute for redis4 and redis5
ashrafdev/mysql-remote-root-code-execution0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no…
b4kesn4ke/cve-2019-9193CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution
biitts/cve-2026-54350-budibase-nosql-injectionPoC for CVE-2026-54350 — Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.
boompig/cve-2016-6662Exploit code for MySQL remote root code execution and privilege escalation (CVE-2016-6662), including Python and C implementations.
w4fz5uck5/udfpwn-cve-2012-5613MySQL 4.x/5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2) automation script.
goldendivider/cve-2026-6471-postgres-logical-decoding-dlopenProof-of-concept exploit for CVE-2026-6471, demonstrating privilege escalation in PostgreSQL via logical decoding dlopen to achieve arbitrary code…
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
securebinary/firebaseexploiterCLI tool to scan for and exploit insecure Firebase databases, supporting mass vulnerability scanning, custom JSON payload injection, and URI path…
slayerkkkk/cve-2025-46817-pocC-based exploit for CVE-2025-46817, a Redis integer overflow vulnerability, enabling crash detection and potential RCE via Lua unpack() payload.
richard-natan/poc-cve-2025-66224Proof-of-concept exploit for CVE-2025-66224 demonstrating remote code execution in OrangeHRM via command injection in the sendmail_path parameter,…
lnwza0x0a/ctf_django_cve-2022-34265Docker-based CTF challenge demonstrating SQL injection in Django's Trunc() and Extract() database functions (CVE-2022-34265) with UNION-based payload…
erengozaydin/college-management-system-course_code-sql-injection-authenticatedProof-of-concept demonstrating authenticated SQL injection in College Management System 1.0 via the 'course_code' parameter, with boolean-based blind…
tarunkant/gopherusThis tool generates gopher link for exploiting SSRF and gaining RCE in various servers
openxp-research/cve-2021-43650Webrun <= 3.6.0.42 SQLi
al1ex/cve-2019-12086jackson unserialize