24 matches found
CVE-2022-28346
CVE-2022-28346 QuerySet.annotate、aggregate 和 extra 中的 SQL 注入漏洞 设置： 运行 ./setup.sh 进行初始设置 打开 Docker 镜像以初始化数据库： docker exec -it containerid /bin/bash 然后运行以下命令： python manage.py makemigrations cve202228346 python manage.py migrate 启动实例： docker-compose up 现在打开以下 URL 加载示例数据：...
CVE-2025-64459
CTF挑战：Django ORM注入 CVE-2025-64459 分类： Web安全 难度： 中等 漏洞： CVE-2025-64459 - Django ORM过滤器注入 📝 描述 我们构建了一个带有管理面板的安全商品商店。你能绕过认证并找到私人管理员的笔记吗？ URL： http://YOURSERVER:6008 🚀 部署 cd webdjangocve docker-compose up --build -d 🎯 漏洞利用 CVE-2025-64459 认证绕过 /login/ 使用 connector=OR curl...
Label Studio - Sensitive Information Exposure
An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...
RedTeamBrasil-CVE-2025-64459
connector-sqli 针对 Django ORM 的自动化 SQL 注入利用 Q-object connector · CVE-2025-64459 🎥 RedTeam Brasil 频道 — 实战葡萄牙语攻击安全教程。 ██████╗ ████████╗██████╗ connector-sqli ██╔══██╗╚══██╔══╝██╔══██╗ Django Q connector SQLi ██████╔╝ ██║ ██████╔╝ CVE-2025-64459 ██╔══██╗ ██║ ██╔══██╗ RedTeam Brasil 频道 ██║ ██║ ██║...
CVE-2025-57833
CVE-2025-57833：Django SQL 注入漏洞 此仓库演示并解释了 CVE-2025-57833，这是一个影响 Django ORM 的严重 SQL 注入漏洞，受影响版本包括 4.2 之前的 4.2.24、5.1 之前的 5.1.12 和 5.2 之前的 5.2.6。 🚨 漏洞概述 CVSS 评分 ：9.8（严重） 影响 ：SQL 注入导致远程代码执行 RCE 是否需要认证 ：否（未认证攻击） 📚 理解背景 什么是 Django ORM？ Django ORM（对象关系映射）允许开发者使用 Python 代码而非原始 SQL 与数据库交互。例如： 替代原始 SQL：SELE...
CVE-2025-64459-Poc
CVE-2025-64459：Django ORM SQL注入概念验证（PoC） 漏洞： 通过 QuerySet 和 Q 关键字参数解包导致的 SQL 注入。 CVE ID： CVE-2025-64459 发现者： Me Cyberstan 披露日期： 2025年11月5日 🚨 执行摘要 本仓库包含一个 Docker 化的概念验证（PoC），演示了 Django ORM 中的一个严重 SQL 注入漏洞 。 该漏洞存在于 Q 对象在实例化过程中处理关键字参数的方式。具体来说，内部的 connector 属性在通过字典解包（例如...
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
EUVD-2026-56860
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117 NetBox 4.5.8 ORM Injection via WritableNestedSerializer
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117
CVE-2026-69117 : NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH re...
CVE-2026-69117 NetBox 4.5.8 ORM Injection via WritableNestedSerializer
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
PT-2026-70842
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-40102
Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-controlled segment query parameter directly to a Django F expression without validation unlike the regular AnalyticsEndpoint, which checks against an allowlist, causing ORM Field...
CVE-2026-33530 InvenTree Vulnerable to ORM Filter Injection
InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, certain API endpoints associated with bulk data operations can be hijacked to exfiltrate sensitive information from the database. The bulk operation API endpoints e.g. /api/part/, /api/stock/,...
CVE-2026-33530
InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, certain API endpoints associated with bulk data operations can be hijacked to exfiltrate sensitive information from the database. The bulk operation API endpoints e.g. /api/part/, /api/stock/,...
PT-2026-28488
Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.2.6 InvenTree versions 1.2.6 through 1.3.0 Description InvenTree is an Open Source Inventory Management System. Certain API endpoints associated with bulk data operations can be exploited to exfiltrate sensitive...
InvenTree 安全漏洞
InvenTree is an open-source inventory management system developed by InvenTree. It provides robust low-level inventory control and parts tracking capabilities. Versions of InvenTree prior to 1.2.6 contained security vulnerabilities. These vulnerabilities stemmed from the batch operation API...
CVE-2026-33530: Exposure of Sensitive Information Through Data Queries
InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, certain API endpoints associated with bulk data operations can be hijacked to exfiltrate sensitive information from the database. The bulk operation API endpoints e.g. /api/part/, /api/stock/,...
