CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...

CVE-2025-29705

CVE-2025-29705 CVE-2025-29705 Introduzione code-gen: uno strumento di generazione di codice che consente di creare modelli personalizzati per generare codice diverso. Supporta MySQL, Oracle, SQL Server, PostgreSQL. https://gitee.com/durcframework/code-gen Questo progetto non implementa alcun...

CVE-2026-59827

CVE-2026-59827 — Unsafe Deserialization of H2 Query Results in Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 Critical | CWE-502: Deserialization of Untrusted Data Overview CVE-2026-59827 is a critical remote code execution vulnerability in Metabase, the popular open-source business intelligence and dat...

CVE-2022-24707

PoC for CVE-2022-24707 SQL Injection Vulnerability on Puncher plugin. A POST request can be crafted to exploit SQL Injection and leak database contents. This is tested on Anuko Time Tracker 1.20.0.5640. python3 exploit.py --help usage: exploit.py -h --username USERNAME --password PASSWORD --host...

CVE-2025-14847

🛡️ CVE-2025-14847 - Strumento Facile per la Sicurezza di MongoDB 📥 Scarica Ora Download 📋 Panoramica CVE-2025-14847, noto anche come MongoBleed, è uno strumento di sicurezza progettato per identificare le vulnerabilità in MongoDB. Questa applicazione aiuta gli utenti a valutare efficacemente i...

CVE-2026-41472-POC

CyberPanel XSS to RCE CVE-2026-41472 Esecuzione remota di codice con un solo clic in CyberPanel v2.4.3 tramite endpoint API non autenticati. Panoramica Questo exploit combina più vulnerabilità della funzionalità AI Scanner di CyberPanel: 1. Iniezione nel database non autenticata...

CVE-2023-34468

CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code...

WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Database for CF7 versions = 1.2.6...

CVE-2022-24124

POC per CVE-2022-24124 Codice Exploit per CVE-2022-24124 noto come Casdoor SQL Injection Link Exploit: ExploitDB-50792 PacketStormSecurity Risultato atteso: estrarre la versione del database SQL sull'host che esegue Casdoor 1.13.1 Destinato esclusivamente a scopi educativi e di test in ambienti...

CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...

Cisco-UCM-SQLi-Scripts

CVE-2019-15972 Script per SQLi su Cisco UCM Script che possono essere utilizzati per sfruttare la CVE-2019-15972, un problema di SQLi autenticato in Cisco Unified Call Manager UCM. Enumerare le tabelle - enumera tutte le tabelle nel database sottostante e inserisce i nomi delle tabelle in un file...

CVE-2024-51747

CVE-2024-51747 Log in with an administrator account and download the database in the system settings Modify projecthasfiles in the sqlite.db database Compress the modified sqlite.db with gzip and upload it. After uploading it to the project and clicking the file to view/download, the attacker can...

Wordpress-cve-CVE-2022-21661

Wordpress 5.8.2 CVE-2022-21661 Vuln enviroment This enviroment is setup with the Elementor Custom Skin, plugin to test the CVE-2022-21661. to start the enviroment console wp-lab$ ./start.sh To get the admin password get the log from the running container, a new pwd is generated every time the...

CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

DEBIAN-CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user could use scripting commands to inject arbitrary information into the response stream for a given client, potentially corrupting or returning tampered data to other users on the same...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. A specially crafted Lua script executed in Redis can trigger a heap overflow in the cjson library, leading to heap corruption and potentially remote code execution. This issue exists in all versions of Redis that support Lua scripting,...

Astra Linux – Vulnerability in Rails

There is a potential escalation to an RCE vulnerability when using YAML serialized columns in Active Record versions 7.0.3.1, 6.1.6.1, 6.0.5.1, and 5.2.8.1. This could allow an attacker, who can manipulate data in the database through methods like SQL injection, to escalate the attack to an RCE...

Astra Linux – Vulnerability in pgpool2

In Pgpool-II, there is a risk of exposing sensitive information due to incompatible policy issues. If a database user accesses the query cache, unauthorized table data may be retrieved for that user...