Lucene search
+L

50 matches found

Kitploit
Kitploit
•added 2026/10/08 12:03 p.m.•10 views

DjVul_StringAgg

Django CVE-2020-7471 SQLi CVE-2020-7471: Potential SQL injection via StringAggdelimiter django.contrib.postgres.aggregates.StringAgg aggregation function was subject to SQL injection, using a suitably crafted delimiter. RUN python manage.py makemigrations python manage.py migrate python manage.py...

9.8CVSS6.9AI score0.65575EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/10/03 2:25 p.m.•15 views

cve-2020-7471-Time_Blind_SQLi-

This repository does not have a README...

9.8CVSS6.7AI score0.65575EPSS
SaveExploits9
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•16 views

FreeBSD : chromium -- security fixes (5181294e-7471-11f1-8de5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5181294e-7471-11f1-8de5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

8.3CVSS7.6AI score0.00338EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/28 11:19 p.m.•14 views

ECHO-7471-C002-8395 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•29 views

Linux Distros Unpatched Vulnerability : CVE-2026-7471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allow...

3.5CVSS5.8AI score0.00257EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/14 6:16 a.m.•26 views

CVE-2026-7471

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with control of a virtual registry upstream to make requests to internal hosts due to improper validation...

3.5CVSS0.00257EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/14 6:16 a.m.•18 views

UBUNTU-CVE-2026-7471

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with control of a virtual registry upstream to make requests to internal hosts due to improper validation...

3.5CVSS5.8AI score0.00257EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/05/14 5:33 a.m.•19 views

CVE-2026-7471

Removed by vendor...

3.5CVSS5.9AI score0.00257EPSS
SaveExploits0
OSV
OSV
•added 2026/05/14 5:33 a.m.•18 views

CVE-2026-7471 Server-Side Request Forgery (SSRF) in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with control of a virtual registry upstream to make requests to internal hosts due to improper validation...

3.5CVSS5.5AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/04/29 12:00 a.m.•12 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : poppler vulnerabilities (USN-7471-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7471-1 advisory. It was discovered that poppler did not properly verify adbe.pkcs7.sha1 signatures in PDF documents. An attacke...

4.3CVSS5.2AI score0.00112EPSS
SaveExploits0References2
Circl
Circl
•added 2024/03/13 1:46 p.m.•16 views

CVE-2020-7471

creationtimestamp| type| source ---|---|--- 2024-03-13 13:46:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/611 2026-01-30 19:25:35+00:00| seen| https://gist.github.com/aw-junaid/ed30afd1f8d04325e68a70aa2e002932 2026-09-09 04:00:36+00:00| seen|...

9.8CVSS6.6AI score0.65575EPSS
SaveExploits9References2
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•38 views

Debian: Security Advisory (DLA-965-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.8AI score0.03649EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:01 a.m.•12 views

SUSE CVE-2020-7471

Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter. By passing a suitably crafted delimiter...

7.6CVSS9.2AI score0.65575EPSS
SaveExploits9References6
Mend
Mend
•added 2022/06/20 12:00 a.m.•1 views

MSC-2022-7471

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

8.8CVSS5.8AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2021/06/03 11:21 a.m.•292 views

Exploit for SQL Injection in Djangoproject Django

CVE-2020-7471-PoC Django PoC for the SQL injection vulnerabi...

9.8CVSS9.9AI score0.65575EPSS
SaveExploits9
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•72 views

SUSE: Security Advisory (SUSE-SU-2017:2946-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS7.7AI score0.04544EPSS
SaveExploits1References38
GithubExploit
GithubExploit
•added 2020/08/03 5:29 a.m.•187 views

Exploit for SQL Injection in Djangoproject Django

DOBBYISFREE! - 출제된 CTF: 2020 Christmas CTFhttps://dreamh...

9.8CVSS8.3AI score0.65575EPSS
SaveExploits9
OpenVAS
OpenVAS
•added 2020/06/23 12:00 a.m.•93 views

Fedora: Security Advisory for python-django (FEDORA-2020-2e7d30f7aa)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.3AI score0.65575EPSS
SaveExploits15References2
OpenVAS
OpenVAS
•added 2020/06/23 12:00 a.m.•50 views

Fedora: Security Advisory for python-django (FEDORA-2020-c2639662af)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.6AI score0.65575EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
•added 2020/06/22 12:00 a.m.•55 views

Fedora 31 : python-django (2020-2e7d30f7aa)

Security fix for CVE-2020-7471. - Security fix for CVE-2020-9402. - Security fix for CVE-2020-13254. - Security fix for CVE-2020-13596. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

9.8CVSS6.9AI score0.65575EPSS
SaveExploits9References5
Rows per page
Query Builder