GitHub

SQL Injection scanner made with python.

sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads.

Understanding Django ORM through 1-day vulnerabilities and SQL bugs

This article is the Japanese version of a post published on STEALIEN's Korean technical blog in December 2022. It introduces ...
SDxCentral

VU#148244: PandasAI interactive prompt function can be exploited to run arbitrary Python code through prompt injection, which can lead to remote code execution (RCE)

PandasAI, an open source project by SinaptikAI, has been found vulnerable to Prompt Injection attacks. An attacker with access to the chat prompt can craft malicious input that is interpreted as code, ...
GitHub

Static SQL injection review

description Use when reviewing application source code for SQL injection, unsafe SQL or ORM query construction, including PHP, Doctrine, JavaScript, Python and other web stacks. Trace untrusted data ...