CVE-2023-25813

The repository contains minimal code related to a Sequelize-based user model but lacks any functional exploit code or technical details about CVE-2023-25813. The README is empty except for the CVE identifier.

This repository contains a functional proof-of-concept for CVE-2023-25813, demonstrating a Sequelize SQL injection vulnerability in the login route. The vulnerable code uses `literal` and `and` in a way that allows bypassing authentication.

This repository contains a functional proof-of-concept exploit for CVE-2023-25813, demonstrating SQL injection in Sequelize < 6.19.1 via improper handling of the `replacements` option. The PoC includes a Node.js application with vulnerable Sequelize queries and detailed technical analysis of the root cause.

This repository contains a functional proof-of-concept for CVE-2023-25813, demonstrating a SQL injection vulnerability in Sequelize. The exploit is embedded in a Node.js application with Docker support, showcasing the vulnerability in a controlled environment.

This repository contains a functional Node.js application demonstrating CVE-2023-25813, a SQL injection vulnerability in the login and post creation endpoints. The code uses raw SQL queries with user-controlled input, allowing for authentication bypass and arbitrary SQL execution.

This repository contains a functional Python script for exploiting CVE-2023-25813, a SQL injection vulnerability. The script automates blind SQLi attacks to extract database information, table structures, and data from a vulnerable target.