WatchGuard Fireware AD Helper Component - Credentials Disclosure

WatchGuard Fireware Threat Detection and Response TDR service contains a credential-disclosure vulnerability in the AD Helper component that allows unauthenticated attackers to gain Active Directory credentials for a Windows domain in plaintext. id: CVE-2020-10532 info: name: WatchGuard Fireware ...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel 설정 정보 스캐너 도구 이 도구는 Pterodactyl 패널 인스턴스를 스캔하여 데이터베이스 구성 정보를 가져오려고 시도합니다. 특정 경로 탐색 취약점을 이용하여 패널의 민감한 구성 데이터를 얻을 수 있습니다. 프로젝트 개요 이 프로젝트는 공개 네트워크에 노출된 Pterodactyl 패널 인스턴스의 구성 정보를 감지하고 수집하기 위한 고성능 HTTP 요청 도구입니다. 대상 서버에 특정 요청을 보내고 응답에 데이터베이스 구성 정보가 포함되어 있는지 확인한 후 결과를...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

EUVD-2026-89468

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

CVE-2026-51936

Zetetic SQLCipher versions prior to 4.15.0 are vulnerable to SQL injection via the sqlcipher_export convenience function. This function, which is primarily used to copy database contents or convert between plaintext and encrypted formats, temporarily disables defensive restrictions to perform dyn...

EUVD-2026-89542

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 CVE-2017-1000499의 PoC phpMyAdmin 4.7.x 버전4.7.6.1/4.7.7 이전은 CSRF 취약점에 노출되어 있습니다. 사용자를 속여 조작된 URL을 클릭하게 함으로써 레코드 삭제, 테이블 드롭/트렁케이트 등과 같은 유해한 데이터베이스 작업을 수행할 수 있습니다. 내용 Makefile web/index.html 지침 사전 준비 git clone https://github.com/Villaquiranm/5MMISSI-CVE-2017-1000499.git cd...

cve-exploit

CVE-EXPLOIT Используйте это программное обеспечение только в законных целях. Я никоим образом не несу ответственности за ваши действия. Используйте Python 3.11.2 Создано Edu0x01 ОПИСАНИЕ cve-exploit — это хаб для поиска CVE и эксплойтов. Он основан на официальных базах данных NIST, ExploitDB и...

CVE-2026-71379

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

Security Bulletin: EDB Postgres AI Database with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI database products. Hence, IBM strongly recommends upgrading to 18.6 Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-71379

The Toptech TMS7 and TopHAT systems are affected by a vulnerability in the file export endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to export arbitrary database tables . This flaw allows for unauthorized access to sensitive data. While specific exploit...

CVE-2023-39361

CVE-2023-39361 Cacti v1.2.24의 인증되지 않은 SQL 인젝션 개요 Cacti 는 PHP, MySQL/MariaDB로 작성된 오픈소스 운영 모니터링 도구로, 친숙한 인터페이스를 제공합니다. 이 취약점은 2023년에 발견되었으며, 1.2.24 이전의 모든 버전에 영향을 미칩니다. 이 보안 결함은 SQL 쿼리에 값을 삽입할 때 부적절한 구현으로 인해 발생합니다. 이는 공격자가 데이터베이스를 수정 하고 원격으로 코드를 실행 할 수 있게 하는 심각한 SQL 인젝션 취약점입니다. 실습 환경 설정: 이 분석에서는 간편...

CVE-2026-79536

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP Management중앙 엔드포인트 보안 관리 - 부울 기반 SQL 인젝션으로 RCE로 이어짐 Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software Link:https://www.ahnlab.com/ko/product/epp-management Product...

CVE-2023-54400

Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection...

CVE-2026-100288

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records...