CVE-2021-42392-exploit-lab

⚠️ Preuve de Concept d'Exploitation RCE de la Base H2 CVE-2021-42392 Ce dépôt fournit un environnement minimal et contrôlé pour tester la vulnérabilité d'exécution de code à distance de H2 Database CVE-2021-42392 en utilisant la fonctionnalité CREATE ALIAS. Contrairement à de nombreuses...

fastjson-1.2.58-rce

fastjson-1.2.58-rce 필요: fastjson autoType is enabled h2 database and some jar . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar fastjson-1.2.58.jar 다운로드...

H2 Database Console - JNDI Injection RCE

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution via the H2 web console versions before...

CVE-2023-34468

Exploit CVE-2023-34468 Aperçu Ce dépôt fournit un outil d'exploitation basé sur Python pour CVE-2023-34468 , une vulnérabilité critique d'exécution de code à distance CVSS 9.8 dans Apache NiFi versions 0.0.2 à 1.21.0. Il permet aux utilisateurs authentifiés d'exécuter du code arbitraire en...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Удаленное выполнение кода через H2 Database RUNSCRIPT в Apache NiFi = 1.21.0 Уязвимость Apache NiFi поставляется с H2 database JAR, встроенным по умолчанию. Сервис контроллера DBCPConnectionPool можно настроить на использование этого H2 драйвера. H2...

Jackson_RCE-CVE-2019-12384

Configuration de l'environnement Importez le projet dans IntelliJ IDEA, configurez Maven pour importer automatiquement les dépendances, puis créez le fichier suivant dans un répertoire web vide local, sauvegardez-le sous exec.sql. Lancez ensuite un serveur HTTP : CREATE ALIAS SHELLEXEC AS $$ Stri...

CVE-2026-59827

CVE-2026-59827 — Désérialisation non sécurisée des résultats de requêtes H2 dans Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 Critique | CWE-502 : Désérialisation de données non fiables Aperçu CVE-2026-59827 est une vulnérabilité critique d'exécution de code à distance dans Metabase, la plateforme...

CVE-2023-34468

CVE-2023-34468: Удалённое выполнение кода через компоненты БД в Apache NiFi Сервисы контроллера DBCPConnectionPool и HikariCPConnectionPool в Apache NiFi 0.0.2 – 1.21.0 позволяют аутентифицированному и авторизованному пользователю настроить URL базы данных с драйвером H2, который обеспечивает...

CVE-2025-56819

CVE-2025-56819 Un problème dans Datart v.1.0.0-rc.3 permet à un attaquant distant d'exécuter du code arbitraire via le paramètre de connexion INIT. POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type":...

Another-Metabase-RCE-CVE-2023-38646

Extension du RCE avant authentification dans Metabase CVE-2023-38646 expliqué ici Cela m'a aidé à éviter les erreurs liées à « database already in use » avec H2 et PostgreSQL comme moteurs "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null,...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 1. 요약 참고: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2는 관계형 데이터베이스 관리 시스템으로, SQL 엔진 안에서 Java 코드를 직접 컴파일하고 실행할 수 있는 기능을 제공한다. H2 드라이버는 JDBC URL을 파싱하여 애플리케이션과 데이터베이스 간의 연결을 설정한다. 이때 URL에 포함된 설정 파라미터를 통해 데이터베이스의 초기 상태나 동작을 제어할 수 있다. 문제가 되는 H2 2.1.210 이전 버전에는 JDBC...

Astra Linux – Vulnerability in h2database

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes the class name of the driver and the URL of the database as parameters. An attacker may pass in a JNDI driver name and a URL that points to an LDAP or RMI server, allowing for remote code execution. This vulnerability can be...

Metabase 0.61.0 - Authenticated Remote Code Execution

Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution Date: 2026-08-12 Exploit Author: Gutierre0x80 Vendor Homepage: https://www.metabase.com/ Software Link: https://github.com/metabase/metabase Version: = 0.58.0 = 0.59.0 = 0.60.0 = 0.61.0 Example: python3 exploit.py...

CLSA-2026-1787636864 TuxCare security update for com.h2database:h2 (1 CVE)

TuxCare rebuilt com.h2database:h2 to address 1 CVE. Fixed in 1.3.176-tuxcare.1...

Exploit for Deserialization of Untrusted Data in Metabase

CVE-2026-59827: Metabase Unsafe Deserialization in H2 Native Q...

Metabase 0.63.4 SQL Injection

A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability allows an attacker-controlled user-id value supplied to the password reset endpoint to reach a HoneySQL query as raw SQL. On installations using the default embedded H2...

CVE-2026-17603

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

EUVD-2026-54513

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

CVE-2026-17603: Improper Control of Generation of Code

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

Metabase 0.58.x < 0.58.15 / 0.59.x < 0.59.12 / 0.60.x < 0.60.6.3 / 0.61.x < 0.61.1.4 / 1.58.x < 1.58.15 / 1.59.x < 1.59.12 / 1.60.x < 1.60.6.3 / 1.61.x < 1.61.1.4 RCE (CVE-2026-59827)

The version of Metabase installed on the remote host is 0.58.x prior to 0.58.15, 0.59.x prior to 0.59.12, 0.60.x prior to 0.60.6.3, 0.61.x prior to 0.61.1.4, 1.58.x prior to 1.58.15, 1.59.x prior to 1.59.12, 1.60.x prior to 1.60.6.3, or 1.61.x prior to 1.61.1.4. It is, therefore, affected by a...