25 matches found
django-connector-CVE-2025-64459-testbed
Django-CVE-2025-64459-Testbed Django CVE-2025-64459 用の自己完結型テストベッド。Docker を使用した辞書展開による QuerySet.filter パラメータインジェクションを実証します。 脆弱性について CVE-2025-64459 は Django（特にバージョン 5.1.14 未満）における高深刻度の脆弱性であり、ユーザー入力が辞書展開を介して直接渡された場合（例：request.GET）に QuerySet.filter 内でのパラメータインジェクションを許容します。 攻撃者は connector...
django_sqli_target_CVE-2025-64459
此存储库没有 README。...
CVE-2025-64459
このリポジトリには README がありません。...
Helpdesk-Telecom-CVE-2025-64459
准备仓库下载 1. 更新软件包： sudo apt update 2. 如有需要，安装git： sudo apt install -y git 3. 需要设置端口转发规则。在 Debian 12.11.0 虚拟机的“网络”设置中，点击“端口转发”。 4. 添加规则： 名称：Django； 协议：TCP； 主机地址：空； 主机端口：8000； 主机地址：空； 客户机端口：8000。 下载仓库，安装易受攻击的Web应用程序 1. 克隆仓库： git clone https://github.com/alxsourin/Helpdesk-Telecom-CVE-2025-64459.git 2...
RedTeamBrasil-CVE-2025-64459
connector-sqli Django ORM の SQL インジェクション自動攻撃 Q オブジェクト connector · CVE-2025-64459 🎥 RedTeam Brasil チャンネル — オフェンシブセキュリティを、実際に、ポルトガル語で。 root@kitploit: ██████╗ ████████╗██████╗ connector-sqli ██╔══██╗╚══██╔══╝██╔══██╗ Django Q connector SQLi ██████╔╝ ██║ ██████╔╝ CVE-2025-64459 ██╔══██╗ ██║ ██╔══██╗...
CVE-2025-64459-hunter
CVE-2025-64459-hunter CVE-2025-64459（Django SQL Injection脆弱性）向け高速ネットワークスキャナ インストール root@kitploit: pip install -r requirements.txt 使い方 root@kitploit: Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t 192.168.1.0/24 Custom ports python...
CVE-2025-64459
CVE-2025-64459...
Security Bulletin: IBM Edge Data Collector uses django-4.2.25-py3-none-any.whl which is vulnerable to CVE-2025-64458, CVE-2025-64459.
Summary IBM Edge Data Collector uses django-4.2.25-py3-none-any.whl which is vulnerable to CVE-2025-64458, CVE-2025-64459. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-64458 DESCRIPTION: An issue was discovered in 5.1 before 5.1.14, 4.2...
Fedora: Security Advisory (FEDORA-2025-24dfd3b072)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for python-Django (important)
openSUSE security update: security update for python-django ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20153-1 Rating: important References: bsc1252926 bsc1254437 Cross-References: CVE-2025-13372 CVE-2025-64459 CVE-2025-64460 CVSS scores:...
Exploit for SQL Injection in Djangoproject Django
CVE-2025-64459-Exploit-PoC CVE-2025-64459: Critical RCE in Dja...
Security Bulletin: Denial-of-service attack, SQL injection, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service
Summary IBM Storage Defender - Resiliency Service is vulnerable to denial-of-service attack, SQL injection, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-64458 DESCRIPTION: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before...
Exploit for SQL Injection in Djangoproject Django
CTF Challenge: Django ORM Injection CVE-2025-64459 Catego...
Django 5.1.13 - SQL Injection
Exploit Title: Django 5.1.13 - SQL Injection Google Dork: none Not applicable for this vulnerability Date: 2025-12-03 Exploit Author: Wafcontrol Security Team Vendor Homepage: https://www.djangoproject.com/ Software Link: https://www.djangoproject.com/download/ Version: 5.2 before 5.2.8, 5.1 befo...
About SQL Injection – Django (CVE-2025-64459) vulnerability
About SQL Injection - Django CVE-2025-64459 vulnerability. Django is a free and open-source high-level Python web framework. The vulnerability allows attackers to manipulate database query logic by injecting internal query parameters connector and negated when applications pass user-controlled...
Exploit for SQL Injection in Djangoproject Django
Django-CVE-2025-64459-Testbed A self-contained testbed for Dj...
Mageia: Security Advisory (MGASA-2025-0292)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2025-2679 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence,...
Security update for python-Django
This update for python-Django fixes the following issues: CVE-2025-64459: Fixed a potential SQL injection via the 'connector' keyword bsc1252926 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...