PoC Archive PoC Archive

tag

Sqli

FreePBX Unauthenticated SQL Injection to RCE (CVE-2025-57819) KEV EPSS 88%
CVE-2025-57819 web Patched
CVE-2025-57819webCRITICAL 9.8Patched2026-07-06WordPress Contest Gallery Plugin Unauthenticated Blind SQL Injection — CVE-2026-3180
CVE-2026-3180 web Unverified
CVE-2026-3180webHIGHUnverified2026-07-05The Events Calendar WordPress Plugin Unauthenticated Blind SQL Injection (CVE-2026-49772)
CVE-2026-49772 web Patched
CVE-2026-49772webCRITICAL 9.3Patched2026-07-05Sparx Enterprise Architect / Pro Cloud Server Unauthenticated Binary-Protocol SQL Injection (CVE-2026-42096)
CVE-2026-42096 network Unverified
CVE-2026-42096networkCRITICALUnverified2026-07-05Sequelize ORM JSON Cast SQL Injection — CVE-2026-30951
CVE-2026-30951 web Patched
CVE-2026-30951webHIGHPatched2026-07-05ProjeQtor Unauthenticated Login SQL Injection (CVE-2026-41462)
CVE-2026-41462 web Patched
CVE-2026-41462webCRITICAL 9.8Patched2026-07-05ProFTPD mod_sql Pre-Auth SQL Injection Leading to RCE (CVE-2026-42167)
CVE-2026-42167 network Patched
CVE-2026-42167networkHIGH 8.1Patched2026-07-05Control Web Panel Pre-Auth Blind SQL Injection to RCE — CVE-2026-57517
CVE-2026-57517 web Patched
CVE-2026-57517webCRITICAL 9.8Patched2026-07-05Business Directory Plugin for WordPress — Unauthenticated Time-Based Blind SQL Injection (CVE-2026-2576)
CVE-2026-2576 web Patched
CVE-2026-2576webHIGH 7.5Patched2026-07-05Drupal Core PostgreSQL SQL Injection (CVE-2026-9082) KEV EPSS 88%
CVE-2026-9082 / SA-CORE-2026-004 web Patched
CVE-2026-9082 / SA-CORE-2026-004webCRITICALPatched2026-05-30