teams_dump

최신 버전의 Microsoft Teams에서 쿠키를 덤프 및 복호화하는 PoC extract.py는 인수 없이 그냥 덤프합니다 extract.exe는 extract.py를 exe로 패킹한 것입니다 teamsdump.py 데이터베이스의 값 나열 python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value -------------------------------------------------- Table: cookies Columns in...

CVE-2022-0739

CVE-2022-0739 CVE-2022-0739 BookingPress 익스플로잇에 대한 제 버전입니다. destr4ct의 POC를 기반으로 했으며, 조금 더 보기 좋게 다듬었습니다. 예제 HackTheBox의 MetaTwo 머신을 대상으로 한 예제입니다. 해당 머신은 취약한 bookingpress 플러그인버전 1.0.10이 설치된 WordPress를 호스팅합니다. python booking-sqlinjector.py -u http://metapress.htb -nu http://metapress.htb/events/ -a ...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit Android 다운로드 제공자의 정렬 매개변수에서 SQL 인젝션을 악용하는 PoC CVE-2019-2196 보안 권고 Android AOSP 다운로드 제공자의 쿼리 정렬 매개변수 SQL 인젝션 CVE-2019-2196 데모...

CVE-2025-58443

CVE-2025-58443 https://github.com/FOGProject/fogproject에 대한 exploit POC로, 인증 우회를 통해 전체 DB 덤프가 포함된 DB를 덤프할 수 있으며, 여기에는 평문 비밀번호, 사용자 및 관리자 비밀번호 해시가 포함됩니다. 취약한 버전 : 1.5.10.1673 다음은 이 취약점을 악용할 수 있는 스크립트로, 다음 작업을 수행할 수 있습니다 : 전체 MySQL DB 덤프 SSRF 취약점 악용 서버의 파일 목록 나열 DB 덤프에는 해시된 비밀번호와 FTP 등의 평문 비밀번호가 포함...

CVE-2022-31890

osTicket용 CVE-2022-31890 | 지원 티켓 시스템 닉네임: python nickname.py The output of the first nickname in the table. 비밀번호: python password.py The output of the first password in the table. 파일로 출력: python dumpFile.py cat dump.txt || nickname::password 콘솔로 출력: python dumpConsole.py Output to console ||...

Advanced-SQL-Injection-Cheatsheet

MySQL エラーベース SQLインジェクション チートシート これはおそらくSQLインジェクション攻撃の中でも最も簡単な脆弱性です。攻撃者はSQLエラーメッセージを利用して、MySQLデータベースを列挙およびダンプすることができます。 脆弱性の検出http://domain.com/index.php?id=1 Website loads successfully http://domain.com/index.php?id=1' エラーメッセージが表示されます：You have an error in your SQL syntax; check the manual that...

Wordpress-cve-CVE-2022-21661

Wordpress 5.8.2 CVE-2022-21661 취약 환경 이 환경은 Elementor Custom Skin 플러그인을 사용하여 CVE-2022-21661을 테스트하도록 설정되었습니다. 환경을 시작하려면 console wp-lab$ ./start.sh 관리자 비밀번호를 얻으려면 실행 중인 컨테이너의 로그를 확인하세요. 컨테이너가 부팅될 때마다 새 비밀번호가 생성됩니다. console $wp-lab$ docker logs test user admin pwd: inpJbxn+mhWWNSgEAlsU2A== localip:...

cve-2021-22146

cve-2021-22146 내부 침투 테스트 중 Elastic ECE에서 취약점을 발견했습니다. Elasticdump는 7.10.0부터 7.13.3까지의 Elastic ECE 데이터베이스를 덤프하기 위한 CVE-2021-22146의 PoC입니다. https://www.exploit-db.com/exploits/50152 협력자: Mario Díaz Caldera...

CVE-2023-48084

CVE-2023-48084 CVE-2023-48084에 대한 Python 익스플로잇 - Nagios XI 5.11.3 이전 버전은 대량 수정 도구를 통해 SQL 인젝션 취약점이 있는 것으로 발견되었습니다. 이 익스플로잇은 /admin/bannermessage-ajaxhelper.php?action=acknowledgebannermessage&id=를 사용하여 SQL 쿼리를 실행하며, 블라인드 SQL 인젝션을 이용합니다... 사용법 저장소를 클론하고 requirements.txt를 설치하세요. git clone...

CVE-2026-19708

The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes them under a fixed filename, allowing unauthenticated attackers to retrieve a full database dump including every user's email address and...

EUVD-2026-87530

The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes them under a fixed filename, allowing unauthenticated attackers to retrieve a full database dump including every user's email address and...

CVE-2026-19708

The File Manager WordPress plugin (versions 7.2.2-8.0.4 ) contains a vulnerability where unauthenticated users can download database backup archives. This occurs because the plugin fails to prevent unauthorized access and, in some instances, uses a fixed filename for these backups. On servers tha...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

EUVD-2026-68608

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-75133 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

PT-2026-83878

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbd cron process parameter without authentication. Attackers can predict the...

CVE-2026-75133: Missing Authentication for Critical Function

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

Unsafe Dependency Resolution

Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the \unrestrict meta-command input expansion in the restore process. An attacker can execute arbitrary code as the client operating system account by injecting malicious input from a compromised origin...

CVE-2026-63359

The Appriss Insights Equifax Victim Information Notification Exchange VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information...

CVE-2026-63359

CVE-2026-63359 affects Appriss Insights VINE applications. The vulnerability allows an unauthenticated attacker to send a specially-crafted request that bypasses the login page, access other users’ credentials, take over other user accounts, and dump sensitive PII and other database information. ...