DBconfigReader

Vulnerabilità di divulgazione delle informazioni di configurazione del database nell'interfaccia del sistema OA ecology di Weaver /mobile/DBconfigReader.jsp http://x.x.x.x:8090/mobile/DBconfigReader.jsp Analisi del codice Fortify rileva - algoritmo di crittografia debole SecretKey key =...

oracleShell

oracleShell Oracle 数据库命令执行 Ambiente di test - privilegi DBA： SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL Version...

CVE-2026-88424

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

CVE-2022-24716

CVE-2022-24716 Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user,...

CVE-2026-75855

Titolo Path Traversal nei comandi server "create database" / "drop database" consente scrittura ed eliminazione arbitraria di file al di fuori della directory database configurata Riepilogo I comandi create database e drop database dell'endpoint POST /api/v1/server utilizzano il nome del database...

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS Reflected XSS v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità Cross-Site Scripting XSS nell'installazione di cmsmadesimple v.2.2.18 permettono a un attaccante locale di eseguire script web arbitrari tramite un payload manipolato iniettato nel Nome del Database, Utente...

CVE-2024-34472

CVE-2024-34472 Descrizione: Un utente autenticato può sfruttare una vulnerabilità di SQL injection blind esistente nel file mliRealtimeEmails.php. Il parametro ordemGrid in una richiesta POST a /mailinspector/mliRealtimeEmails.php non sanifica correttamente l'input, consentendo a un utente...

CVE-2026-63268

A flaw was found in LibreOffice Calc. An attacker could craft a spreadsheet document with an external database link that points to local text files. If a user opens the malicious document, the application automatically reads the local file contents into the sheet, leading to unauthorized...

wp2shell

wp2shell CVE-2026-63030 + CVE-2026-60137+poc Questa vulnerabilità non è molto facile da sfruttare. Comando di esecuzione dei comandi del database: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Riferimento: https://github.com/Icex0/wp2shell-poc Però c'è un problema: l'aggiunta di...

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

CVE-2026-102576 Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

EUVD-2026-92519

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

CVE-2026-63277

A flaw was found in LibreOffice. When linking spreadsheet cell ranges to external data sources in Calc, a document can specify an external Java database driver. By convincing a user to open a specially crafted document, a remote attacker can force the application to download and execute untrusted...

CVE-2026-63266

A flaw was found in LibreOffice. When processing a spreadsheet with a cell range linked to an external data source, LibreOffice Calc can load an embedded Firebird database that writes files outside its intended directory. By convincing a user to open a specially crafted document, an attacker coul...

Jackson_RCE-CVE-2019-12384

Configurazione dell'ambiente Importa il progetto in IDEA, dopo aver configurato Maven imposta l'importazione automatica delle librerie di dipendenze, quindi scrivi il seguente file in una directory web locale vuota e salvalo come exec.sql. Avvia anche un server http: CREATE ALIAS SHELLEXEC AS $$...

CVE-2019-16759

vBulletin RCE 5.x Get Email + SMTP CVE-2019-16759 This tools will extracts and dumps Email + SMTP from database server USAGE $ git clone https://github.com/mas1337/CVE-2019-16759.git && cd CVE-2019-16759 $ ./vb-email-smtp.sh list.txt Disclaimer All code on this repository is for educational...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py è uno script Python progettato per rilevare vulnerabilità specifiche nelle istanze ServiceNow e scaricare i dettagli di connessione al database se la vulnerabilità viene trovata. Questo strumento è particolarmente utile per ricercatori di sicurezza e penetration...

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

database-sentinel

🛡️ Database Sentinel Audit di sicurezza per il tuo backend database. Chiedi "esegui l'audit del mio database" e ottieni un report con punteggio e il codice di correzione esatto. Funziona come Claude Skill Supabase, MongoDB, come server MCP in sola lettura per qualsiasi client AI, oppure come agent...

CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...