CVE-2024-1301---Badgermeter-moni-tool-SQL-Injection

CVE-2024-1301 --- Badgermeter moni tool - SQL Injection https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1301: 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CWE-89. Software link : https://www.s-can.at/en/product/monitool/...

CVE-langgraph

cve-id ⚡ Uso Semplice Usa questo progetto solo in ambienti sicuri e autorizzati come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follow below...

CVE-2024-1071

CVE-2024-1071 CVE-2024-1071 Ultimate Member Accesso non autorizzato al Database / SQLi Il PoC è ora pubblicato. È stato creato solo per scopi educativi/di ricerca! Usalo a tuo rischio e pericolo!...

CVE-2024-42327

Writeup CVE-2024-42327 Zabbix Schwachstelle Ziel: 10.129.231.176 Informationen: Ich weiß, dass mein Ziel ein Zabbix-Server ist. Ich habe ein Standardbenutzerkonto erhalten, um mich in Zabbix anzumelden: Benutzer matthew, Passwort 96qzn0h2e1k3. Dieses Konto hat einen Standardbenutzer ohne...

CVE-2022-0739

CVE-2022-0739 Proof-of-Concept exploit SQLI BookingPress prima della versione 1.0.11 Utilizzo Fornisci l'URL in cui il plugin Booking Press è in uso sull'applicazione. bash exploit.sh '' es. Gli hash sono oscurati in questa demo root@kitploit: ┌──user@user-/ └─$ bash sqliexploit.sh...

CVE-2024-32640-SQLI-MuraCMS

Muraider - Automatisierung der Erkennung und Ausnutzung von CVE-2024-32640 \ SQLi in Mura/Masa CMS Verwendung Erkennung: python3 CVE-2024-32640.py --url https://target.com/ Ghauri-Ausnutzung Übergib '-g' oder '--ghauri' als Argument: Übergib alle Argumente, die du mit Ghauri verwenden möchtest,...

kviklet

Kviklet Kviklet.dev | Versionshinweise | Discord Sicherer Zugriff auf Produktionsumgebungen, ohne die Entwicklerproduktivität zu beeinträchtigen. Kviklet ausgesprochen Quick-let setzt auf das Vier-Augen-Prinzip und ein hohes Maß an Konfigurierbarkeit, um einen Pull-Request-ähnlichen Review- und...

CVE-2021-36393

CVE-2021-36393 Fehlerbasierte blinde SQL-Injection mit Bit-Shifting-Ansatz für Moodle 3.10.4. Ermöglicht einem Angreifer, beliebige Datenbankabfragen durchzuführen. Zum Beispiel können Sie stehlen: Testantworten aus der Datenbank Ändern Sie die Datei script.js und führen Sie sie auf der Route...

CVE-2024-1071

CVE-2024-1071 Ultimate Member Accesso non autorizzato al database / SQLi Il PoC è ora pubblicato. È stato creato solo per scopi educativi/di ricerca! Utilizzalo a tuo rischio!...

Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection

The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query. id: CVE-2023-0630 info: name: Slimstat Analytics 4.9.3.3 Subscriber - SQL Injection author: DhiyaneshDK severity: high description...

KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection

The KiviCare Clinic & Patient Management System EHR plugin for WordPress is vulnerable to SQL Injection via the 'visittypeserviceid' parameter of the taxcalculateddata AJAX action in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

Kaseya VSA 2017 ConnectWise ManagedITSync - Remote Code Execution

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run...

WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection

WordPress Secure Copy Content Protection and Content Locking plugin before 2.8.2 contains a SQL injection vulnerability. The plugin does not escape the sccpid parameter of the ayssccpresultsexportfile AJAX action, available to both unauthenticated and authenticated users, before using it in a SQL...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099 - Vulnerabilidade de Injeção SQL no Online-Nurse-Hiring-System v1.0 Autor do Exploit: ugurkarakoc Página do Fornecedor https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Link do Software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Visão Geral O...

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

Exploit CVE-2021-36396 Descrizione Questo repository contiene un exploit basato su Python che sfrutta CVE-2021-36393, una grave vulnerabilità trovata nella funzione dei corsi recenti di Moodle. Il difetto risiede nel parametro 'sort', consentendo attacchi di SQL injection che possono portare ad...

EUVD-2026-62928

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database and create, read, update, or delete all data in the database. The vulnerability is possible because Splunk SOAR playbo...

CVE-2026-0075

CVE-2026-0075 PoC di ricerca per ContactsProvider Un prototipo di ricerca Android in ambiente controllato per valutare il comportamento osservabile associato a CVE-2026-0075 in ContactsProvider2. Panoramica CVE-2026-0075 è un problema Android di elevazione locale dei privilegi in ContactsProvider...

CVE-2026-76363

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database and create, read, update, or delete all data in the database. The vulnerability is possible because Splunk SOAR playbo...

CVE-2026-76365

Splunk SOAR versions below 8.6.0 are affected by a SQL injection vulnerability in the custom list retrieval feature of playbooks. The root cause is that Splunk SOAR constructs the custom list database lookup using the supplied list name directly in the query instead of a bound SQL parameter , all...