MISP
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
curated-resourcesdatabase-securitydefensive-tools+10
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
sqlancer/sqlancerAutomated testing to find logic and performance bugs in database systems
trailofbits/not-going-anywhereIntentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…
karlvbiron/mad-catMAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks against multiple…
cybertechajju/cve-2025-14847_expolita critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data…
security-phoenix-demo/mongobleed-exploit-cve-2025-14847Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools
gbrsh/cve-2024-1071Ultimate Member Unauthorized Database Access / SQLi
ishwardeepp/cve-2025-1094-poc-postgre-sqliProof-of-concept emulation and analysis of CVE-2025-1094, a critical PostgreSQL SQL injection vulnerability. Includes Docker-based lab setup, exploit…
romain-deperne/cve-2026-41490Detailed CVE-2026-41490 disclosure with PoC demonstrating unauthenticated SQL injection in Dagster database I/O managers via dynamic partition keys,…
tc4dy/cve-2026-57821-poc-exploit🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no…
anusha-khan29/cve-2025-70149-sql-injectionSecurity research project — SQL Injection vulnerability exploitation and mitigation
codeb0ssx/cve-2025-14847-pocAcademic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.
richard-natan/poc-cve-2025-66224Proof-of-concept exploit for CVE-2025-66224 demonstrating remote code execution in OrangeHRM via command injection in the sendmail_path parameter,…
afnaan-ahmed/cve-2025-14598Technical advisory and analysis of CVE-2025-14598, a critical unauthenticated SQL injection in BET e-Portal enabling database manipulation and…
ant1sec-ops/cve-2023-39593Database authenticated code execution
kamal-marouane/cve-2022-28346A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious…
lukasz-rybak/cve-2025-68400Technical disclosure of a critical time-based blind SQL injection vulnerability (CVE-2025-68400) in ChurchCRM, including vulnerable code analysis,…
lukasz-rybak/cve-2025-69216Proof-of-concept repository for CVE-2025-69216, an authenticated SQL injection in OpenSTAManager's Scadenzario print template, enabling extraction of…